diff --git a/packages/sub/pom.xml b/packages/sub/pom.xml
index dff7d473fe..03de6442f2 100644
--- a/packages/sub/pom.xml
+++ b/packages/sub/pom.xml
@@ -40,7 +40,7 @@
 	    	<dependency>
 		      <groupId>org.apache.commons</groupId>
 		      <artifactId>commons-compress</artifactId>
-		      <version>1.20</version>
+		      <version>1.26.0</version>
 	    	</dependency>
 	    	<dependency>
 		      <groupId>org.springframework</groupId>