diff --git a/pom.xml b/pom.xml
index 7fed4c5..736e104 100644
--- a/pom.xml
+++ b/pom.xml
@@ -59,7 +59,7 @@ limitations under the License.
       <artifactId>commons-lang3</artifactId>
       <!-- override version to avoid CVE-2025-48924 -->
       <!-- can be removed when velocity upgrades its commons-lang3 dependency -->
-      <version>3.21.0</version>
+      <version>3.22.0</version>
     </dependency>
 
     <dependency>