diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0ea83b739b..873e5930c2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ When updating the changelog, remember to be very clear about what behavior has c
 and what APIs have changed, if applicable.
 
 ## [Unreleased]
+- Change commons-httpclient dependency with httpcomponents.client5:httpclient5 to fix security vulnerability
 
 ## [29.41.4] - 2023-01-09
 change the innitialize size of resolvedProperties to 0 in order to save memory pre-allocated
diff --git a/build.gradle b/build.gradle
index 0bf3ec15b8..800281b0cf 100644
--- a/build.gradle
+++ b/build.gradle
@@ -55,7 +55,7 @@ project.ext.externalDependency = [
   'commonsCli': 'commons-cli:commons-cli:1.0',
   'commonsCodec': 'commons-codec:commons-codec:1.3',
   'commonsCompress': 'org.apache.commons:commons-compress:1.2',
-  'commonsHttpClient': 'commons-httpclient:commons-httpclient:3.1',
+  'commonsHttpClient': 'org.apache.httpcomponents.client5:httpclient5:5.1.3',
   'commonsIo': 'commons-io:commons-io:2.4',
   'commonsLang': 'commons-lang:commons-lang:2.6',
   'commonsText': 'org.apache.commons:commons-text:1.10.0',