diff --git a/.classpath b/.classpath
index 09782c9055..b668ce8c03 100644
--- a/.classpath
+++ b/.classpath
@@ -34,7 +34,7 @@
 	<classpathentry kind="lib" path="ooxml-testlib/guava.jar"/>
 	<classpathentry kind="lib" path="ooxml-testlib/javassist.jar"/>
 	<classpathentry exported="true" kind="lib" path="compile-lib/xmlsec-2.1.2.jar"/>
-	<classpathentry exported="true" kind="lib" path="lib/commons-codec-1.13.jar"/>
+	<classpathentry exported="true" kind="lib" path="lib/commons-codec-1.14.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-logging-1.2.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/commons-collections4-4.4.jar"/>
 	<classpathentry kind="lib" path="lib/commons-math3-3.6.1.jar"/>
diff --git a/build.gradle b/build.gradle
index b71bf66cf2..e1904925ef 100644
--- a/build.gradle
+++ b/build.gradle
@@ -92,7 +92,7 @@ subprojects {
 
     version = '4.1.3-SNAPSHOT'
     ext {
-        commonsCodecVersion = '1.13'
+        commonsCodecVersion = '1.14'
         commonsCompressVersion = '1.20'
         commonsMathVersion = '3.6.1'
         japicmpversion = '4.1.2'
diff --git a/build.xml b/build.xml
index bf3b349329..7b54e82ce3 100644
--- a/build.xml
+++ b/build.xml
@@ -172,9 +172,9 @@ under the License.
     <property name="main.commons-logging.jar" location="${main.lib}/commons-logging-1.2.jar"/>
     <property name="main.commons-logging.url"
               value="${repository.m2}/maven2/commons-logging/commons-logging/1.2/commons-logging-1.2.jar"/>
-    <property name="main.commons-codec.jar" location="${main.lib}/commons-codec-1.13.jar"/>
+    <property name="main.commons-codec.jar" location="${main.lib}/commons-codec-1.14.jar"/>
     <property name="main.commons-codec.url"
-              value="${repository.m2}/maven2/commons-codec/commons-codec/1.13/commons-codec-1.13.jar"/>
+              value="${repository.m2}/maven2/commons-codec/commons-codec/1.14/commons-codec-1.14.jar"/>
     <property name="main.log4j.jar" location="${main.lib}/log4j-1.2.17.jar"/>
     <property name="main.log4j.url" value="${repository.m2}/maven2/log4j/log4j/1.2.17/log4j-1.2.17.jar"/>
     <property name="main.junit.jar" location="${main.lib}/junit-4.13.jar"/>
@@ -655,6 +655,7 @@ under the License.
                 <include name="commons-codec-1.10*"/>
                 <include name="commons-codec-1.11*"/>
                 <include name="commons-codec-1.12*"/>
+                <include name="commons-codec-1.13*"/>
                 <include name="commons-compress-1.1*"/>
                 <include name="commons-collections4-4.1*"/>
                 <include name="commons-collections4-4.2*"/>
diff --git a/maven/poi.pom b/maven/poi.pom
index 87a4371715..367d308120 100644
--- a/maven/poi.pom
+++ b/maven/poi.pom
@@ -76,7 +76,7 @@
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.13</version>
+      <version>1.14</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
diff --git a/sonar/main/pom.xml b/sonar/main/pom.xml
index 19c7b79430..37ab22980d 100644
--- a/sonar/main/pom.xml
+++ b/sonar/main/pom.xml
@@ -123,7 +123,7 @@
         <dependency>
             <groupId>commons-codec</groupId>
             <artifactId>commons-codec</artifactId>
-            <version>1.13</version>
+            <version>1.14</version>
         </dependency>
         <dependency>
             <groupId>com.zaxxer</groupId>