diff --git a/dev/dependencyList b/dev/dependencyList
index 626bae1aa9a..4089d963d7a 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -140,10 +140,10 @@ log4j-core/2.20.0//log4j-core-2.20.0.jar
 log4j-slf4j-impl/2.20.0//log4j-slf4j-impl-2.20.0.jar
 logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
 lz4-java/1.8.0//lz4-java-1.8.0.jar
-metrics-core/4.2.8//metrics-core-4.2.8.jar
-metrics-jmx/4.2.8//metrics-jmx-4.2.8.jar
-metrics-json/4.2.8//metrics-json-4.2.8.jar
-metrics-jvm/4.2.8//metrics-jvm-4.2.8.jar
+metrics-core/4.2.23//metrics-core-4.2.23.jar
+metrics-jmx/4.2.23//metrics-jmx-4.2.23.jar
+metrics-json/4.2.23//metrics-json-4.2.23.jar
+metrics-jvm/4.2.23//metrics-jvm-4.2.23.jar
 mimepull/1.9.15//mimepull-1.9.15.jar
 netty-all/4.1.100.Final//netty-all-4.1.100.Final.jar
 netty-buffer/4.1.100.Final//netty-buffer-4.1.100.Final.jar
diff --git a/pom.xml b/pom.xml
index 2a9a793e5eb..f3b3d57644c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@
         <apache.archive.dist>https://archive.apache.org/dist</apache.archive.dist>
         <atlas.version>2.3.0</atlas.version>
         <bouncycastle.version>1.67</bouncycastle.version>
-        <codahale.metrics.version>4.2.8</codahale.metrics.version>
+        <codahale.metrics.version>4.2.23</codahale.metrics.version>
         <commons-cli.version>1.5.0</commons-cli.version>
         <commons-codec.version>1.15</commons-codec.version>
         <commons-collections.version>3.2.2</commons-collections.version>