diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index 463dc70aeee..23a47bc4d07 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -158,7 +158,7 @@
     <logback_version>1.2.11</logback_version>
     <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
     <log4j2_version>2.22.0</log4j2_version>
-    <commons_io_version>2.11.0</commons_io_version>
+    <commons_io_version>2.15.1</commons_io_version>
 
     <embedded_redis_version>0.13.0</embedded_redis_version>
 
diff --git a/dubbo-maven-plugin/pom.xml b/dubbo-maven-plugin/pom.xml
index 4ca13184e37..d7f4710c4b1 100644
--- a/dubbo-maven-plugin/pom.xml
+++ b/dubbo-maven-plugin/pom.xml
@@ -65,7 +65,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.11.0</version>
+      <version>2.15.1</version>
     </dependency>
   </dependencies>
 
diff --git a/dubbo-native-plugin/pom.xml b/dubbo-native-plugin/pom.xml
index 305ab8d528e..09b6ee1006a 100644
--- a/dubbo-native-plugin/pom.xml
+++ b/dubbo-native-plugin/pom.xml
@@ -61,7 +61,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.11.0</version>
+      <version>2.15.1</version>
     </dependency>
     <dependency>
       <groupId>org.apache.dubbo</groupId>