diff --git a/plugins/ingest-attachment/build.gradle b/plugins/ingest-attachment/build.gradle
index d83bf70ca18..0b696b48cce 100644
--- a/plugins/ingest-attachment/build.gradle
+++ b/plugins/ingest-attachment/build.gradle
@@ -38,8 +38,8 @@ opensearchplugin {
 }
 
 versions << [
-  'tika'  : '1.24',
-  'pdfbox': '2.0.19',
+  'tika'  : '1.24.1',
+  'pdfbox': '2.0.23',
   'poi'   : '4.1.2',
   'mime4j': '0.8.3'
 ]
@@ -50,7 +50,7 @@ dependencies {
   // build against Jackson 2.9.5, but still works on our current version
   api "org.apache.tika:tika-parsers:${versions.tika}"
   api 'org.tukaani:xz:1.8'
-  api 'commons-io:commons-io:2.6'
+  api 'commons-io:commons-io:2.7'
   api "org.slf4j:slf4j-api:${versions.slf4j}"
 
   // character set detection
diff --git a/plugins/ingest-attachment/licenses/commons-io-2.6.jar.sha1 b/plugins/ingest-attachment/licenses/commons-io-2.6.jar.sha1
deleted file mode 100644
index 75f7934c082..00000000000
--- a/plugins/ingest-attachment/licenses/commons-io-2.6.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-815893df5f31da2ece4040fe0a12fd44b577afaf
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/commons-io-2.7.jar.sha1 b/plugins/ingest-attachment/licenses/commons-io-2.7.jar.sha1
new file mode 100644
index 00000000000..bbb1b15dd1e
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/commons-io-2.7.jar.sha1
@@ -0,0 +1 @@
+3f2bd4ba11c4162733c13cc90ca7c7ea09967102
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/fontbox-2.0.19.jar.sha1 b/plugins/ingest-attachment/licenses/fontbox-2.0.19.jar.sha1
deleted file mode 100644
index ac83b56e463..00000000000
--- a/plugins/ingest-attachment/licenses/fontbox-2.0.19.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-b8b3873aacde51f1a3f4a052b236de828867d000
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/fontbox-2.0.23.jar.sha1 b/plugins/ingest-attachment/licenses/fontbox-2.0.23.jar.sha1
new file mode 100644
index 00000000000..eefdc9011f5
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/fontbox-2.0.23.jar.sha1
@@ -0,0 +1 @@
+1a6b960dd2c1b1f8a5f5d6668b2930b50ff4324d
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/pdfbox-2.0.19.jar.sha1 b/plugins/ingest-attachment/licenses/pdfbox-2.0.19.jar.sha1
deleted file mode 100644
index 14757fabc20..00000000000
--- a/plugins/ingest-attachment/licenses/pdfbox-2.0.19.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-8dfcfc278b4b66e1a8b0e9e681b84ffe48da2c21
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/pdfbox-2.0.23.jar.sha1 b/plugins/ingest-attachment/licenses/pdfbox-2.0.23.jar.sha1
new file mode 100644
index 00000000000..43583d43b02
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/pdfbox-2.0.23.jar.sha1
@@ -0,0 +1 @@
+b89643d162c4e30b4fe39cfa265546cc506d4d18
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/tika-core-1.24.1.jar.sha1 b/plugins/ingest-attachment/licenses/tika-core-1.24.1.jar.sha1
new file mode 100644
index 00000000000..ba4f64ff8f0
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/tika-core-1.24.1.jar.sha1
@@ -0,0 +1 @@
+703e65fb300d1425d4ad7b68c21c7795bb7a95c3
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/tika-core-1.24.jar.sha1 b/plugins/ingest-attachment/licenses/tika-core-1.24.jar.sha1
deleted file mode 100644
index 6579753564d..00000000000
--- a/plugins/ingest-attachment/licenses/tika-core-1.24.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-ed2e85f034743ea8e7ff25ab594caf361c408a44
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/tika-parsers-1.24.1.jar.sha1 b/plugins/ingest-attachment/licenses/tika-parsers-1.24.1.jar.sha1
new file mode 100644
index 00000000000..6ad33ac8eca
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/tika-parsers-1.24.1.jar.sha1
@@ -0,0 +1 @@
+02ce8d709cef4ed6a1a51ff14ba15b2ba2e76f09
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/tika-parsers-1.24.jar.sha1 b/plugins/ingest-attachment/licenses/tika-parsers-1.24.jar.sha1
deleted file mode 100644
index 6ce939379f8..00000000000
--- a/plugins/ingest-attachment/licenses/tika-parsers-1.24.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-282c0ecd31cb235f7d96bef18b8cdcb56573a195
\ No newline at end of file