diff --git a/gxcloudstorage-azureblob/pom.xml b/gxcloudstorage-azureblob/pom.xml
index 09980d77b..ae2d9af06 100644
--- a/gxcloudstorage-azureblob/pom.xml
+++ b/gxcloudstorage-azureblob/pom.xml
@@ -42,5 +42,11 @@
             <artifactId>jackson-core</artifactId>
             <version>${jackson.version}</version>
         </dependency>
+        <!-- overwrite azure-storage commons-lang3 dependency due to CVEs -->
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-lang3</artifactId>
+            <version>${commons.lang3.version}</version>
+        </dependency>
 	</dependencies>
 </project>
diff --git a/gxcompress/pom.xml b/gxcompress/pom.xml
index ebeb9b276..03b08d325 100644
--- a/gxcompress/pom.xml
+++ b/gxcompress/pom.xml
@@ -16,7 +16,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.27.1</version>
+            <version>1.28.0</version>
         </dependency>
         <dependency>
             <groupId>org.tukaani</groupId>