diff --git a/lock.sbt b/lock.sbt
index 7a401569d..72252cead 100644
--- a/lock.sbt
+++ b/lock.sbt
@@ -116,7 +116,7 @@ Compile / dependencyOverrides ++= {
       "net.sf.jopt-simple" % "jopt-simple" % "5.0.2",
       "nl.grons" % "metrics4-scala_2.13" % "4.3.5",
       "org.apache.commons" % "commons-email" % "1.6.0",
-      "org.apache.commons" % "commons-lang3" % "3.18.0",
+      "org.apache.commons" % "commons-lang3" % "3.19.0",
       "org.apache.httpcomponents" % "httpasyncclient" % "4.1.2",
       "org.apache.httpcomponents" % "httpclient" % "4.5.2",
       "org.apache.httpcomponents" % "httpcore" % "4.4.5",
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 5a48b53f5..67c07081a 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -90,7 +90,7 @@ object Dependencies {
     val apacheCommonsEmail = "org.apache.commons" % "commons-email" % "1.6.0"
 
     // See: https://commons.apache.org/proper/commons-lang/changes-report.html
-    val apacheCommonsLang3 = "org.apache.commons" % "commons-lang3" % "3.18.0"
+    val apacheCommonsLang3 = "org.apache.commons" % "commons-lang3" % "3.19.0"
 
     // Does v1.25 recognize .woff and .woff2 file extensions? Then can remove
     // extra checks in module ty-core. [5AKR20]