diff --git a/changes/en-us/2.x.md b/changes/en-us/2.x.md
index 98b830daf0a..f433ded2294 100644
--- a/changes/en-us/2.x.md
+++ b/changes/en-us/2.x.md
@@ -31,6 +31,7 @@ Add changes here for all PR submitted to the 2.x branch.
 - [[#7138](https://github.com/apache/incubator-seata/pull/7138)] Remove org.eclipse.jetty dependency
 - [[#7139](https://github.com/apache/incubator-seata/pull/7139)] upgrade xstream to 1.4.21
 - [[#7141](https://github.com/apache/incubator-seata/pull/7141)] remove unused dependencies
+- [[#7142](https://github.com/apache/incubator-seata/pull/7142)] upgrade commons-compress to 1.27.1
 
 
 ### security:
diff --git a/changes/zh-cn/2.x.md b/changes/zh-cn/2.x.md
index 92b5c56cb1a..5071f29da59 100644
--- a/changes/zh-cn/2.x.md
+++ b/changes/zh-cn/2.x.md
@@ -31,6 +31,7 @@
 - [[#7138](https://github.com/apache/incubator-seata/pull/7138)] 移除 org.eclipse.jetty 依赖
 - [[#7139](https://github.com/apache/incubator-seata/pull/7139)] 升级 xstream 至 1.4.21 版本
 - [[#7141](https://github.com/apache/incubator-seata/pull/7141)] 去除未使用的依赖
+- [[#7142](https://github.com/apache/incubator-seata/pull/7142)] 升级 commons-compress 至 1.27.1 版本
 
 
 ### security:
diff --git a/dependencies/pom.xml b/dependencies/pom.xml
index e0bc33d9f48..f6475d8f8a1 100644
--- a/dependencies/pom.xml
+++ b/dependencies/pom.xml
@@ -69,7 +69,7 @@
         <motan.version>1.0.0</motan.version>
         <jcommander.version>1.82</jcommander.version>
         <bucket4j.version>8.1.0</bucket4j.version>
-        <commons-compress.version>1.21</commons-compress.version>
+        <commons-compress.version>1.27.1</commons-compress.version>
         <ant.version>1.10.12</ant.version>
         <lz4.version>1.7.1</lz4.version>
         <jraft.version>1.3.14</jraft.version>