diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index 40a3f12..e56bfb7 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -547,6 +547,7 @@
 * Remove invalid service descriptors from gremlin-shaded.
 * Fixed bug in Python and .NET traversal `clone()` where deep copies of bytecode were not occurring.
 * Fixed bug in Python about integer serializer which was out of range of `g:Int32`
+* Bump commons-codec 1.14
 
 [[release-3-3-10]]
 === TinkerPop 3.3.10 (Release Date: February 3, 2020)
diff --git a/pom.xml b/pom.xml
index b6ae9eb..bbb4cad 100644
--- a/pom.xml
+++ b/pom.xml
@@ -753,7 +753,7 @@
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.12</version>
+                <version>1.14</version>
             </dependency>
         </dependencies>
     </dependencyManagement>