diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 17984e58d..b8c073137 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -187,7 +187,7 @@ object Dependencies {
   val terraCommonLib = tclExclusions("bio.terra" % "terra-common-lib" % tclVersion classifier "plain")
 
   // was included transitively before, now explicit
-  val commonsCodec: ModuleID = "commons-codec" % "commons-codec" % "1.17.1"
+  val commonsCodec: ModuleID = "commons-codec" % "commons-codec" % "1.17.2"
 
   val rootDependencies = Seq(
     // proactively pull in latest versions of Jackson libs, instead of relying on the versions