diff --git a/CHANGELOG.md b/CHANGELOG.md
index d4cf64a600366..cf0c2518efbcd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -104,7 +104,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `netty` from 4.1.91.Final to 4.1.93.Final ([#7901](https://github.com/opensearch-project/OpenSearch/pull/7901))
 - Bump `com.netflix.nebula:gradle-extra-configurations-plugin` from 9.0.0 to 10.0.0 in /buildSrc ([#7068](https://github.com/opensearch-project/OpenSearch/pull/7068))
 - Bump `com.google.guava:guava` from 32.0.0-jre to 32.0.1-jre (#8009)
-- Bump `commons-io:commons-io` from 2.12.0 to 2.13.0 (#8014)
+- Bump `commons-io:commons-io` from 2.12.0 to 2.13.0 (#8014, #8013)
 
 ### Changed
 - Replace jboss-annotations-api_1.2_spec with jakarta.annotation-api ([#7836](https://github.com/opensearch-project/OpenSearch/pull/7836))
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
index 7e667e81aaa43..56e00ace22dd6 100644
--- a/buildSrc/build.gradle
+++ b/buildSrc/build.gradle
@@ -109,7 +109,7 @@ dependencies {
   api 'com.netflix.nebula:nebula-publishing-plugin:20.3.0'
   api 'com.netflix.nebula:gradle-info-plugin:12.1.3'
   api 'org.apache.rat:apache-rat:0.15'
-  api 'commons-io:commons-io:2.11.0'
+  api 'commons-io:commons-io:2.13.0'
   api "net.java.dev.jna:jna:5.13.0"
   api 'gradle.plugin.com.github.johnrengelman:shadow:8.0.0'
   api 'org.jdom:jdom2:2.0.6.1'