diff --git a/CHANGELOG.md b/CHANGELOG.md
index caf4a0d79..465920eab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `jakarta.xml.bind:jakarta.xml.bind-api` from 4.0.2 to 4.0.5
 - Bumps `com.google.protobuf:protobuf-java` from 4.34.0 to 4.34.1 in /spark/core
 - Bumps `software.amazon.awssdk:http-client-spi` from 2.42.4 to 2.42.17
+- Bumps `commons-codec:commons-codec` from 1.21.0 to 1.22.0
 
 ## [2.0.0]
 ### Added
diff --git a/dist/build.gradle b/dist/build.gradle
index 61972eca6..af45e9fec 100644
--- a/dist/build.gradle
+++ b/dist/build.gradle
@@ -110,7 +110,7 @@ dependencies {
     thirdPartyShaded("org.codehaus.jackson:jackson-core-asl:${project.ext.jacksonVersion}")
 
     implementation("commons-logging:commons-logging:1.3.6")
-    implementation("commons-codec:commons-codec:1.21.0")
+    implementation("commons-codec:commons-codec:1.22.0")
     implementation("javax.xml.bind:jaxb-api:2.3.1")
     implementation("org.apache.hive:hive-service:$hiveVersion") {
         exclude module: "log4j-slf4j-impl"
diff --git a/dist/licenses/commons-codec-1.21.0.jar.sha1 b/dist/licenses/commons-codec-1.21.0.jar.sha1
deleted file mode 100644
index 4fbbe1e7e..000000000
--- a/dist/licenses/commons-codec-1.21.0.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-d95f998db5f89900fe895daf6cd2cddcb2f1d64b
\ No newline at end of file
diff --git a/dist/licenses/commons-codec-1.22.0.jar.sha1 b/dist/licenses/commons-codec-1.22.0.jar.sha1
new file mode 100644
index 000000000..5fa248915
--- /dev/null
+++ b/dist/licenses/commons-codec-1.22.0.jar.sha1
@@ -0,0 +1 @@
+6b3eb4beb7058c2a638f5f17bcb388649fd339dd
\ No newline at end of file