diff --git a/driver/pom.xml b/driver/pom.xml
index 3942af2ce9..535444eaee 100644
--- a/driver/pom.xml
+++ b/driver/pom.xml
@@ -106,6 +106,10 @@
       <artifactId>neo4j</artifactId>
       <scope>test</scope>
     </dependency>
+    <dependency>
+      <groupId>commons-codec</groupId>
+      <artifactId>commons-codec</artifactId>
+    </dependency>
     <dependency>
       <groupId>org.reactivestreams</groupId>
       <artifactId>reactive-streams-tck</artifactId>
diff --git a/pom.xml b/pom.xml
index 87944d1661..6f2cbfb335 100644
--- a/pom.xml
+++ b/pom.xml
@@ -49,7 +49,9 @@
     <testng.version>7.9.0</testng.version>
     <jarchivelib.version>1.2.0</jarchivelib.version>
     <!-- supply a newer version than the one supplied by the jarchivelib 1.2.0 -->
-    <commons-compress.version>1.25.0</commons-compress.version>
+    <commons-compress.version>1.26.0</commons-compress.version>
+    <!-- an optional dependency of commons-compress used by TarArchiveOutputStream -->
+    <commons-codec.version>1.16.1</commons-codec.version>
     <bouncycastle-jdk18on.version>1.77</bouncycastle-jdk18on.version>
     <logback-classic.version>1.2.13</logback-classic.version>
     <jackson.version>2.16.1</jackson.version>
@@ -180,6 +182,12 @@
         <version>${commons-compress.version}</version>
         <scope>test</scope>
       </dependency>
+      <dependency>
+        <groupId>commons-codec</groupId>
+        <artifactId>commons-codec</artifactId>
+        <version>${commons-codec.version}</version>
+        <scope>test</scope>
+      </dependency>
       <dependency>
         <groupId>org.bouncycastle</groupId>
         <artifactId>bcprov-jdk18on</artifactId>