diff --git a/pom.xml b/pom.xml
index 0d9fb17e16fd..527629e1a2e1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -125,7 +125,7 @@
     <commons-configuration.version>1.10</commons-configuration.version>
     <commons-exec.version>1.1</commons-exec.version>
     <commons-io.version>2.16.1</commons-io.version>
-    <commons-lang3.version>3.14.0</commons-lang3.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <commons-math3.version>3.6.1</commons-math3.version>
     <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
     <commons-text.version>1.10.0</commons-text.version>
@@ -749,6 +749,11 @@
           </exclusion>
         </exclusions>
       </dependency>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-lang3</artifactId>
+        <version>${commons-lang3.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.apache.curator</groupId>
         <artifactId>curator-client</artifactId>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index 8c9f5256f91e..511a2d6be48b 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -67,7 +67,7 @@
     <apache-directory-server.version>2.0.0-M24</apache-directory-server.version>
     <checkstyle.version>11.1.0</checkstyle.version>
     <commons-collections4.version>4.4</commons-collections4.version>
-    <commons-lang3.version>3.14.0</commons-lang3.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
     <datasketches.version>2.0.0</datasketches.version>
     <datanucleus-api-jdo.version>6.0.3</datanucleus-api-jdo.version>
diff --git a/storage-api/pom.xml b/storage-api/pom.xml
index 3627fc9cf270..261e45574c90 100644
--- a/storage-api/pom.xml
+++ b/storage-api/pom.xml
@@ -27,6 +27,7 @@
   <inceptionYear>2008</inceptionYear>
   <properties>
     <checkstyle.version>11.1.0</checkstyle.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
     <maven.compiler.source>21</maven.compiler.source>
     <maven.compiler.target>21</maven.compiler.target>
     <netty.version>4.1.127.Final</netty.version>
@@ -59,6 +60,12 @@
     </dependencies>
   </dependencyManagement>
   <dependencies>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>${commons-lang3.version}</version>
+      <scope>provided</scope>
+    </dependency>
     <!-- compile inter-project -->
     <dependency>
       <groupId>org.apache.hadoop</groupId>