diff --git a/docker-comp-scan/build.gradle b/docker-comp-scan/build.gradle
index 11a69fbae8..e5299b1d7c 100644
--- a/docker-comp-scan/build.gradle
+++ b/docker-comp-scan/build.gradle
@@ -36,7 +36,7 @@ dependencies {
     compile group: 'com.google.code.findbugs', name: 'annotations', version: '3.0.1'
 
     compile group: 'com.google.guava', name: 'guava', version: '26.0-jre'
-    compile group: 'org.apache.commons', name: 'commons-compress', version: '1.18'
+    compile group: 'org.apache.commons', name: 'commons-compress', version: '1.19'
     compile group: 'org.owasp', name: 'dependency-check-core', version: '3.3.2'
 
     compile group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-jsr310', version: '2.9.6'