diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3 b/dev/deps/spark-deps-hadoop-3-hive-2.3
index 729c742ec52a9..2624f53c5a789 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -290,7 +290,7 @@ vertx-core/4.5.14//vertx-core-4.5.14.jar
 vertx-web-client/4.5.14//vertx-web-client-4.5.14.jar
 vertx-web-common/4.5.14//vertx-web-common-4.5.14.jar
 wildfly-openssl/2.2.5.Final//wildfly-openssl-2.2.5.Final.jar
-xbean-asm9-shaded/4.27//xbean-asm9-shaded-4.27.jar
+xbean-asm9-shaded/4.28//xbean-asm9-shaded-4.28.jar
 xmlschema-core/2.3.1//xmlschema-core-2.3.1.jar
 xz/1.10//xz-1.10.jar
 zjsonpatch/7.4.0//zjsonpatch-7.4.0.jar
diff --git a/pom.xml b/pom.xml
index 44d9ac7113d27..78de8b2a38d3d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,7 +123,7 @@
     <maven.version>3.9.11</maven.version>
     <exec-maven-plugin.version>3.6.1</exec-maven-plugin.version>
     <sbt.project.name>spark</sbt.project.name>
-    <asm.version>9.8</asm.version>
+    <asm.version>9.9</asm.version>
     <slf4j.version>2.0.17</slf4j.version>
     <log4j.version>2.24.3</log4j.version>
     <!-- make sure to update IsolatedClientLoader whenever this version is changed -->
@@ -539,7 +539,7 @@
       <dependency>
         <groupId>org.apache.xbean</groupId>
         <artifactId>xbean-asm9-shaded</artifactId>
-        <version>4.27</version>
+        <version>4.28</version>
       </dependency>
 
       <!-- Shaded deps marked as provided. These are promoted to compile scope
diff --git a/project/plugins.sbt b/project/plugins.sbt
index d1f57b7fcfb83..fe18d16c48227 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -33,9 +33,9 @@ addSbtPlugin("com.github.sbt" % "sbt-unidoc" % "0.5.0")
 
 addSbtPlugin("io.spray" % "sbt-revolver" % "0.10.0")
 
-libraryDependencies += "org.ow2.asm"  % "asm" % "9.8"
+libraryDependencies += "org.ow2.asm"  % "asm" % "9.9"
 
-libraryDependencies += "org.ow2.asm"  % "asm-commons" % "9.8"
+libraryDependencies += "org.ow2.asm"  % "asm-commons" % "9.9"
 
 addSbtPlugin("com.simplytyped" % "sbt-antlr4" % "0.8.3")