diff --git a/CHANGELOG.md b/CHANGELOG.md
index 99b8d1f39..43c938e3c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ### Dependencies
 - Bump `gradle-wrapper` from 9.31. to 9.4.0 ([#1930](https://github.com/opensearch-project/opensearch-java/pull/1930))
+- Bump `commons-logging:commons-logging` from 1.3.5 to 1.3.6 ([#1922](https://github.com/opensearch-project/opensearch-java/pull/1922))
 
 ### Changed
 
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index aa9b45c0e..9f5548498 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -183,7 +183,7 @@ dependencies {
     val jacksonDatabindVersion = "2.20.1"
 
     // Apache 2.0
-    api("commons-logging:commons-logging:1.3.5")
+    api("commons-logging:commons-logging:1.3.6")
     compileOnly("org.opensearch.client", "opensearch-rest-client", opensearchVersion)
     testImplementation("org.hamcrest:hamcrest:3.0")
     testImplementation("com.carrotsearch.randomizedtesting:randomizedtesting-runner:2.8.4") {