diff --git a/build.gradle b/build.gradle
index 528dee6..1dc2ada 100644
--- a/build.gradle
+++ b/build.gradle
@@ -70,7 +70,7 @@ configurations.all {
 		}
 		// workaround vulnerable apache commons versions (transitive of commons-text)
 		if (requested.group == 'org.apache.commons' && requested.name == 'commons-lang3') {
-			useTarget("org.apache.commons:commons-lang3:3.18.0")
+			useTarget("org.apache.commons:commons-lang3:3.20.0")
 		}
 		if (requested.group == 'org.apache.commons' && requested.name == 'commons-compress') {
 			useTarget("org.apache.commons:commons-compress:1.28.0")