diff --git a/build.gradle b/build.gradle
index 1c34b403fa..8d19892cd3 100644
--- a/build.gradle
+++ b/build.gradle
@@ -102,7 +102,7 @@ subprojects {
     ext {
         bouncyCastleVersion = '1.69'
         commonsCodecVersion = '1.15'
-        commonsCompressVersion = '1.20'
+        commonsCompressVersion = '1.21'
         commonsIoVersion = '2.11.0'
         commonsMathVersion = '3.6.1'
         junitVersion = '5.7.1'
diff --git a/build.xml b/build.xml
index e19bfbbb93..c2ae3e168a 100644
--- a/build.xml
+++ b/build.xml
@@ -331,7 +331,7 @@ under the License.
     <!-- jars in the ooxml-lib directory, see the fetch-ooxml-jars target-->
     <dependency prefix="ooxml.curvesapi" artifact="com.github.virtuald:curvesapi:1.06" usage="ooxml"/>
     <dependency prefix="ooxml.xmlbeans" artifact="org.apache.xmlbeans:xmlbeans:5.0.0" usage="ooxml"/>
-    <dependency prefix="ooxml.commons-compress" artifact="org.apache.commons:commons-compress:1.20" usage="ooxml"/>
+    <dependency prefix="ooxml.commons-compress" artifact="org.apache.commons:commons-compress:1.21" usage="ooxml"/>
 
     <!-- jars in the ooxml-test-lib directory, see the fetch-ooxml-jars target-->
     <dependency prefix="ooxml.test.reflections" artifact="org.reflections:reflections:0.9.12" usage="ooxml-tests"/>
diff --git a/maven/poi-ooxml.pom b/maven/poi-ooxml.pom
index 48f9a013e1..769f7578aa 100644
--- a/maven/poi-ooxml.pom
+++ b/maven/poi-ooxml.pom
@@ -69,7 +69,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.20</version>
+            <version>1.21</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>
diff --git a/sonar/ooxml/pom.xml b/sonar/ooxml/pom.xml
index 72641511dc..75a1be215d 100644
--- a/sonar/ooxml/pom.xml
+++ b/sonar/ooxml/pom.xml
@@ -149,7 +149,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.20</version>
+            <version>1.21</version>
         </dependency>
         <dependency>
             <groupId>commons-io</groupId>