diff --git a/pom.xml b/pom.xml
index edb82edd5..737bce6bf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -125,7 +125,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-compress</artifactId>
-                <version>1.27.1</version>
+                <version>1.28.0</version>
             </dependency>
             <!-- commons-compress requires at least version 2.12 but somehow an
               older version gets used for running tests in odfdom resulting in