diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES
index 9a90f6827dc..2ed733fd75f 100644
--- a/DEPENDENCY-LICENSES
+++ b/DEPENDENCY-LICENSES
@@ -34,7 +34,7 @@ List of third-party dependencies grouped by their license type.
         * Apache Commons Crypto (org.apache.commons:commons-crypto:1.1.0 - https://commons.apache.org/proper/commons-crypto/)
         * Apache Commons CSV (org.apache.commons:commons-csv:1.14.0 - https://commons.apache.org/proper/commons-csv/)
         * Apache Commons Exec (org.apache.commons:commons-exec:1.5.0 - https://commons.apache.org/proper/commons-exec/)
-        * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.5 - https://commons.apache.org/proper/commons-fileupload/)
+        * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.6.0 - https://commons.apache.org/proper/commons-fileupload/)
         * Apache Commons IO (commons-io:commons-io:2.19.0 - https://commons.apache.org/proper/commons-io/)
         * Apache Commons Lang (org.apache.commons:commons-lang3:3.17.0 - https://commons.apache.org/proper/commons-lang/)
         * Apache Commons Logging (commons-logging:commons-logging:1.2 - http://commons.apache.org/proper/commons-logging/)
diff --git a/LICENSE-binary b/LICENSE-binary
index abec71381a3..ad615f3bfe5 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -653,7 +653,7 @@ The license texts of these dependencies can be found in the licenses directory.
     Apache-2.0
 
         * Apache Avro (org.apache.avro:avro:1.12.0 - https://avro.apache.org)
-        * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.5 - https://commons.apache.org/proper/commons-fileupload/)
+        * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.6.0 - https://commons.apache.org/proper/commons-fileupload/)
         * Apache Commons Lang (org.apache.commons:commons-lang3:3.17.0 - https://commons.apache.org/proper/commons-lang/)
         * Apache Commons Text (org.apache.commons:commons-text:1.13.1 - https://commons.apache.org/proper/commons-text)
         * snappy-java (org.xerial.snappy:snappy-java:1.1.10.7 - https://github.com/xerial/snappy-java)
diff --git a/pom.xml b/pom.xml
index 2618bb8af6f..7eafa0835f1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -89,7 +89,7 @@
         <commons-lang3.version>3.17.0</commons-lang3.version>
         <commons-exec.version>1.5.0</commons-exec.version>
         <commons-collections.version>4.5.0</commons-collections.version>
-        <commons-fileupload.version>1.5</commons-fileupload.version>
+        <commons-fileupload.version>1.6.0</commons-fileupload.version>
         <commons-codec.version>1.18.0</commons-codec.version>
         <commons-text.version>1.13.1</commons-text.version>
         <commons-cli.version>1.9.0</commons-cli.version>