diff --git a/pom.xml b/pom.xml
index e6c7a431..345c47c8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -438,7 +438,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-compress</artifactId>
-      <version>1.21</version>
+      <version>[1.26.0,)</version>
     </dependency>
     <dependency>
       <groupId>com.google.guava</groupId>