diff --git a/pmd-dist/pom.xml b/pmd-dist/pom.xml
index d089bfc4d3..b5e06e9ef7 100644
--- a/pmd-dist/pom.xml
+++ b/pmd-dist/pom.xml
@@ -192,7 +192,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-compress</artifactId>
-            <version>1.13</version>
+            <version>1.18</version>
             <scope>test</scope>
         </dependency>
     </dependencies>