diff --git a/bom/application/pom.xml b/bom/application/pom.xml
index 6a8543f89e44c..e75c316fec964 100644
--- a/bom/application/pom.xml
+++ b/bom/application/pom.xml
@@ -94,7 +94,7 @@
         <gizmo.version>1.7.0</gizmo.version>
         <jackson-bom.version>2.15.2</jackson-bom.version>
         <commons-logging-jboss-logging.version>1.0.0.Final</commons-logging-jboss-logging.version>
-        <commons-lang3.version>3.12.0</commons-lang3.version>
+        <commons-lang3.version>3.13.0</commons-lang3.version>
         <commons-codec.version>1.16.0</commons-codec.version>
         <classmate.version>1.5.1</classmate.version>
         <!-- When updating, align bytebuddy.version to Hibernate needs as well (just below),
diff --git a/independent-projects/bootstrap/pom.xml b/independent-projects/bootstrap/pom.xml
index 9bee854eb5e9e..0db20683a71fe 100644
--- a/independent-projects/bootstrap/pom.xml
+++ b/independent-projects/bootstrap/pom.xml
@@ -62,7 +62,7 @@
         <jakarta.inject-api.version>2.0.1</jakarta.inject-api.version>
         <commons-codec.version>1.16.0</commons-codec.version>
         <commons-io.version>2.15.0</commons-io.version>
-        <commons-lang.version>3.12.0</commons-lang.version>
+        <commons-lang.version>3.13.0</commons-lang.version>
         <guava.version>32.1.3-jre</guava.version>
         <guava.failureaccess.version>1.0.1</guava.failureaccess.version><!-- keep in sync with guava.version -->
         <j2objc.annotations.version>2.8</j2objc.annotations.version><!-- keep in sync with guava.version -->