diff --git a/lucene/licenses/httpclient-4.5.10.jar.sha1 b/lucene/licenses/httpclient-4.5.10.jar.sha1
deleted file mode 100644
index f50700699c1..00000000000
--- a/lucene/licenses/httpclient-4.5.10.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-7ca2e4276f4ef95e4db725a8cd4a1d1e7585b9e5
diff --git a/lucene/licenses/httpclient-4.5.13.jar.sha1 b/lucene/licenses/httpclient-4.5.13.jar.sha1
new file mode 100644
index 00000000000..ece7cdea6ea
--- /dev/null
+++ b/lucene/licenses/httpclient-4.5.13.jar.sha1
@@ -0,0 +1 @@
+e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada
diff --git a/lucene/licenses/httpcore-4.4.12.jar.sha1 b/lucene/licenses/httpcore-4.4.12.jar.sha1
deleted file mode 100644
index 2a062f3c442..00000000000
--- a/lucene/licenses/httpcore-4.4.12.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-21ebaf6d532bc350ba95bd81938fa5f0e511c132
diff --git a/lucene/licenses/httpcore-4.4.13.jar.sha1 b/lucene/licenses/httpcore-4.4.13.jar.sha1
new file mode 100644
index 00000000000..cffee0313f5
--- /dev/null
+++ b/lucene/licenses/httpcore-4.4.13.jar.sha1
@@ -0,0 +1 @@
+853b96d3afbb7bf8cc303fe27ee96836a10c1834
diff --git a/versions.lock b/versions.lock
index 2d14cf92545..1217c6cf9fd 100644
--- a/versions.lock
+++ b/versions.lock
@@ -10,8 +10,8 @@ junit:junit:4.13.1 (1 constraints: 3b05453b)
 net.sourceforge.nekohtml:nekohtml:1.9.17 (1 constraints: 4405503b)
 org.antlr:antlr4-runtime:4.5.1-1 (1 constraints: 6a05b240)
 org.apache.commons:commons-compress:1.19 (1 constraints: df04fa30)
-org.apache.httpcomponents:httpclient:4.5.10 (1 constraints: 3c054b3b)
-org.apache.httpcomponents:httpcore:4.4.12 (2 constraints: 941535ce)
+org.apache.httpcomponents:httpclient:4.5.13 (1 constraints: 3f054e3b)
+org.apache.httpcomponents:httpcore:4.4.13 (2 constraints: 961565ce)
 org.apache.logging.log4j:log4j-api:2.13.2 (1 constraints: bb0e1b76)
 org.apache.logging.log4j:log4j-core:2.13.2 (1 constraints: 3a053a3b)
 org.apache.opennlp:opennlp-tools:1.9.1 (1 constraints: 0d050c36)
diff --git a/versions.props b/versions.props
index 97d59d8bcc4..9da9afb83dd 100644
--- a/versions.props
+++ b/versions.props
@@ -16,8 +16,8 @@ junit:junit=4.13.1
 net.sourceforge.nekohtml:nekohtml=1.9.17
 org.antlr:antlr4-runtime=4.5.1-1
 org.apache.commons:commons-compress=1.19
-org.apache.httpcomponents:httpclient=4.5.10
-org.apache.httpcomponents:httpcore=4.4.12
+org.apache.httpcomponents:httpclient=4.5.13
+org.apache.httpcomponents:httpcore=4.4.13
 org.apache.logging.log4j:*=2.13.2
 org.apache.opennlp:opennlp-tools=1.9.1
 org.carrot2:morfologik-*=2.1.5