diff --git a/build.sbt b/build.sbt
index 0a44294a..71781b0d 100644
--- a/build.sbt
+++ b/build.sbt
@@ -91,7 +91,7 @@ lazy val core = crossProject(JVMPlatform)
       "org.typelevel" %% "munit-cats-effect" % "2.1.0" % Test,
       "org.scalameta" %% "munit-scalacheck" % "1.2.0" % Test,
       ("org.apache.avro" % "avro" % "1.12.0").exclude("org.apache.commons", "commons-compress"),
-      "org.apache.commons" % "commons-compress" % "1.27.1",
+      "org.apache.commons" % "commons-compress" % "1.28.0",
       "com.lihaoyi" %% "sourcecode" % "0.4.2",
       "org.typelevel" %% "log4cats-slf4j" % "2.7.0",
       "co.fs2" %% "fs2-core" % "3.12.2",