diff --git a/LEGALNOTICE.md b/LEGALNOTICE.md
index 23efba5d370..3746badacac 100644
--- a/LEGALNOTICE.md
+++ b/LEGALNOTICE.md
@@ -32,12 +32,12 @@ and subject to their respective licenses.
 | Library                             | License                   |
 |-------------------------------------|---------------------------|
 | commons-beanutils-1.11.0.jar        | Apache 2.0                |
-| commons-codec-1.21.0.jar            | Apache 2.0                |
+| commons-codec-1.22.0.jar            | Apache 2.0                |
 | commons-collections-3.2.2.jar       | Apache 2.0                |
 | commons-configuration-1.10.jar      | Apache 2.0                |
 | commons-csv-1.14.1.jar              | Apache 2.0                |
 | commons-httpclient-3.1.jar          | Apache 2.0                |
-| commons-io-2.21.0.jar               | Apache 2.0                |
+| commons-io-2.22.0.jar               | Apache 2.0                |
 | commons-lang-2.6.jar                | Apache 2.0                |
 | commons-lang3-3.20.0.jar            | Apache 2.0                |
 | commons-logging-1.3.6.jar           | Apache 2.0                |
@@ -60,4 +60,4 @@ and subject to their respective licenses.
 | log4j-jul-2.25.4.jar                | Apache 2.0                |
 | rsyntaxtextarea-3.6.2.jar           | BSD-3 clause              |
 | swingx-all-1.6.5-1.jar              | LGPL 2.1                  |
-| xom-1.4.0.jar                       | LGPL                      |
+| xom-1.4.1.jar                       | LGPL                      |
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 38dbeb44a27..caa40e03c1b 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -7,12 +7,12 @@ log4j = "2.25.4"
 bndAnnotation = "biz.aQute.bnd:biz.aQute.bnd.annotation:7.2.3"
 bytebuddy = "net.bytebuddy:byte-buddy:1.18.8"
 commons-beanutils = "commons-beanutils:commons-beanutils:1.11.0"
-commons-codec = "commons-codec:commons-codec:1.21.0"
+commons-codec = "commons-codec:commons-codec:1.22.0"
 commons-collections = "commons-collections:commons-collections:3.2.2"
 commons-configuration = "commons-configuration:commons-configuration:1.10"
 commons-csv = "org.apache.commons:commons-csv:1.14.1"
 commons-httpclient = "commons-httpclient:commons-httpclient:3.1"
-commons-io = "commons-io:commons-io:2.21.0"
+commons-io = "commons-io:commons-io:2.22.0"
 commons-lang = "commons-lang:commons-lang:2.6"
 commons-lang3 = "org.apache.commons:commons-lang3:3.20.0"
 commons-logging = "commons-logging:commons-logging:1.3.6"
@@ -36,7 +36,7 @@ log4j-jul = { module = "org.apache.logging.log4j:log4j-jul", version.ref = "log4
 log4j-slf4j = { module = "org.apache.logging.log4j:log4j-slf4j-impl", version.ref = "log4j" }
 rsyntaxtextarea = "com.fifesoft:rsyntaxtextarea:3.6.2"
 swingx = "org.swinglabs.swingx:swingx-all:1.6.5-1"
-xom = "xom:xom:1.4.0"
+xom = "xom:xom:1.4.1"
 
 assertj-core = "org.assertj:assertj-core:3.27.7"
 assertj-swing = "org.assertj:assertj-swing:3.17.1"