diff --git a/services/git-bridge/pom.xml b/services/git-bridge/pom.xml
index 707dd1c52b..e6c3e33a08 100644
--- a/services/git-bridge/pom.xml
+++ b/services/git-bridge/pom.xml
@@ -192,7 +192,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.15</version>
+            <version>1.20</version>
         </dependency>
         <!-- prometheus metrics -->
         <dependency>