diff --git a/pom.xml b/pom.xml
index 49e66491..75be0dc2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -133,7 +133,7 @@
         <java.enforced.version>[21,22)</java.enforced.version>
         <maven.compiler.release>21</maven.compiler.release>
 
-        <apache.commons.lang.version>3.20.0</apache.commons.lang.version>
+        <apache.commons.lang.version>3.21.0</apache.commons.lang.version>
         <apache.commons.text.version>1.15.0</apache.commons.text.version>
         <commons-io.version>2.22.0</commons-io.version>
         <guava.version>33.3.1-jre</guava.version>
@@ -150,7 +150,7 @@
         <guice.version>6.0.0</guice.version>
 
         <slf4j.version>2.0.20</slf4j.version>
-        <logback.version>1.6.4</logback.version>
+        <logback.version>1.6.5</logback.version>
 
         <!-- CVE fixes for transitive dependencies pulled in below their patched versions -->
         <commons-beanutils.version>1.11.0</commons-beanutils.version>