diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 371128bb47da..06495c84a899 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -3,7 +3,7 @@
 antlr = "4.13.2"
 asm = "9.6"
 assertj = "3.27.3"
-commons-codec = "1.17.2"
+commons-codec = "1.18.0"
 commons-compress = "1.19"
 # @keep This version refers to ECJ batch compiler from p2 repositories ("drops").
 ecjP2Drop = "ecj-4.36M1"
diff --git a/lucene/licenses/commons-codec-1.17.2.jar.sha1 b/lucene/licenses/commons-codec-1.17.2.jar.sha1
deleted file mode 100644
index 3ef561c0262f..000000000000
--- a/lucene/licenses/commons-codec-1.17.2.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-cd6bb9d856db5f61871a94d5801efd0b93b7fcb2
diff --git a/lucene/licenses/commons-codec-1.18.0.jar.sha1 b/lucene/licenses/commons-codec-1.18.0.jar.sha1
new file mode 100644
index 000000000000..2164fb23c95a
--- /dev/null
+++ b/lucene/licenses/commons-codec-1.18.0.jar.sha1
@@ -0,0 +1 @@
+ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f
diff --git a/versions.lock b/versions.lock
index 9a6a006ec4c9..b00aeeadaee3 100644
--- a/versions.lock
+++ b/versions.lock
@@ -4,7 +4,7 @@
     "main_dependencies" : {
       "com.carrotsearch.randomizedtesting:randomizedtesting-runner:2.8.3" : "fa9ef26b,refs=4",
       "com.ibm.icu:icu4j:77.1" : "47ea4550,refs=6",
-      "commons-codec:commons-codec:1.17.2" : "e9962aab,refs=4",
+      "commons-codec:commons-codec:1.18.0" : "e9962aab,refs=4",
       "io.sgr:s2-geometry-library-java:1.0.0" : "cbc357ab,refs=4",
       "junit:junit:4.13.1" : "fa9ef26b,refs=4",
       "net.sf.jopt-simple:jopt-simple:5.0.4" : "85a1e4c6,refs=2",
@@ -46,7 +46,7 @@
       "com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava" : "6897bc09,refs=38",
       "com.google.protobuf:protobuf-java:3.25.5" : "6897bc09,refs=38",
       "com.ibm.icu:icu4j:77.1" : "ffa00415,refs=8",
-      "commons-codec:commons-codec:1.17.2" : "733734f0,refs=6",
+      "commons-codec:commons-codec:1.18.0" : "733734f0,refs=6",
       "io.github.eisop:dataflow-errorprone:3.41.0-eisop1" : "6897bc09,refs=38",
       "io.github.java-diff-utils:java-diff-utils:4.12" : "6897bc09,refs=38",
       "io.sgr:s2-geometry-library-java:1.0.0" : "1d5a4b2b,refs=4",