diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index ce200c1..6c68ce4 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -34,6 +34,7 @@
 * Remove invalid service descriptors from gremlin-shaded.
 * Fixed bug in Python and .NET traversal `clone()` where deep copies of bytecode were not occurring.
 * Fixed bug in Python about integer serializer which was out of range of `g:Int32`
+* Bump commons-codec 1.14
 
 [[release-3-3-10]]
 === TinkerPop 3.3.10 (Release Date: February 3, 2020)
diff --git a/pom.xml b/pom.xml
index b3645f7..a0a97f4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -748,7 +748,7 @@
             <dependency>
                 <groupId>commons-codec</groupId>
                 <artifactId>commons-codec</artifactId>
-                <version>1.12</version>
+                <version>1.14</version>
             </dependency>
         </dependencies>
     </dependencyManagement>