diff --git a/src/bom-thirdparty/build.gradle.kts b/src/bom-thirdparty/build.gradle.kts
index 9d32d3ec947..2eef3b44dab 100644
--- a/src/bom-thirdparty/build.gradle.kts
+++ b/src/bom-thirdparty/build.gradle.kts
@@ -95,8 +95,8 @@ dependencies {
         api("net.sf.saxon:Saxon-HE:13.0")
         api("org.apache-extras.beanshell:bsh:2.0b6")
         api("org.apache.commons:commons-collections4:4.6.0")
-        api("org.apache.commons:commons-dbcp2:2.9.0")
-        api("org.apache.commons:commons-jexl3:3.7.0")
+        api("org.apache.commons:commons-dbcp2:2.14.0")
+        api("org.apache.commons:commons-jexl3:3.7.1")
         api("org.apache.commons:commons-jexl:2.1.1")
         api("org.apache.commons:commons-lang3:3.21.0") {
             because("User might still rely on commons-lang3")