diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
index 870a73d97ed..f4c4e21d1e2 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -261,9 +261,9 @@ Apache Software License, Version 2.
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]
 - lib/org.apache.commons-commons-collections4-4.1.jar [19]
-- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7]
+- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7]
 - lib/org.apache.commons-commons-lang3-3.20.0.jar [58]
-- lib/org.apache.commons-commons-text-1.13.1.jar [61]
+- lib/org.apache.commons-commons-text-1.15.0.jar [61]
 - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21]
 - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [21]
 - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [21]
@@ -349,7 +349,7 @@ Apache Software License, Version 2.
 [4] Source available at https://github.com/google/guava/tree/v32.0.1
 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0
 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0
-[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0
+[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1
 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5
@@ -393,7 +393,7 @@ Apache Software License, Version 2.
 [58] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0
 [59] Source available at https://github.com/open-telemetry/opentelemetry-java-instrumentation/tree/v2.27.0
 [60] Source available at https://github.com/prometheus/client_java/tree/v1.5.1
-[61] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1
+[61] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0
 [62] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0
 [64] Source available at https://github.com/merlimat/slog/tree/v0.9.9
 ------------------------------------------------------------------------------------
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
index 4ddbf2f3a00..796784a8a0a 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -241,9 +241,9 @@ Apache Software License, Version 2.
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [16]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [16]
 - lib/org.apache.commons-commons-collections4-4.1.jar [18]
-- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7]
+- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7]
 - lib/org.apache.commons-commons-lang3-3.20.0.jar [55]
-- lib/org.apache.commons-commons-text-1.13.1.jar [56]
+- lib/org.apache.commons-commons-text-1.15.0.jar [56]
 - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [20]
 - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [20]
 - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [20]
@@ -282,7 +282,7 @@ Apache Software License, Version 2.
 [4] Source available at https://github.com/google/guava/tree/v32.0.1
 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0
 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0
-[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0
+[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1
 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5
@@ -311,7 +311,7 @@ Apache Software License, Version 2.
 [52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
 [53] Source available at https://github.com/LMAX-Exchange/disruptor/releases/tag/4.0.0
 [55] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0
-[56] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1
+[56] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0
 [57] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0
 [59] Source available at https://github.com/merlimat/slog/tree/v0.9.9
 ------------------------------------------------------------------------------------
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
index c2ea5f223ef..08e0125e91c 100644
--- a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
+++ b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -261,9 +261,9 @@ Apache Software License, Version 2.
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]
 - lib/org.apache.commons-commons-collections4-4.1.jar [19]
-- lib/org.apache.commons-commons-configuration2-2.12.0.jar [7]
+- lib/org.apache.commons-commons-configuration2-2.15.1.jar [7]
 - lib/org.apache.commons-commons-lang3-3.20.0.jar [57]
-- lib/org.apache.commons-commons-text-1.13.1.jar [60]
+- lib/org.apache.commons-commons-text-1.15.0.jar [60]
 - lib/org.apache.zookeeper-zookeeper-3.9.5.jar [21]
 - lib/org.apache.zookeeper-zookeeper-jute-3.9.5.jar [21]
 - lib/org.apache.zookeeper-zookeeper-3.9.5-tests.jar [21]
@@ -345,7 +345,7 @@ Apache Software License, Version 2.
 [4] Source available at https://github.com/google/guava/tree/v32.0.1
 [5] Source available at https://github.com/apache/commons-cli/tree/rel/commons-cli-1.9.0
 [6] Source available at https://github.com/apache/commons-codec/tree/rel/commons-codec-1.18.0
-[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.12.0
+[7] Source available at https://github.com/apache/commons-configuration/tree/rel/commons-configuration-2.15.1
 [8] Source available at https://github.com/apache/commons-io/tree/rel/commons-io-2.19.0
 [9] Source available at https://github.com/apache/commons-lang/tree/LANG_2_6
 [10] Source available at https://github.com/apache/commons-logging/tree/commons-logging-1.3.5
@@ -389,7 +389,7 @@ Apache Software License, Version 2.
 [57] Source available at https://github.com/apache/commons-lang/tree/rel/commons-lang-3.20.0
 [58] Source available at https://github.com/open-telemetry/opentelemetry-java-instrumentation/tree/v2.27.0
 [59] Source available at https://github.com/prometheus/client_java/tree/v1.5.1
-[60] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.13.1
+[60] Source available at https://github.com/apache/commons-text/tree/rel/commons-text-1.15.0
 [61] Source available at https://github.com/apache/commons-beanutils/tree/rel/commons-beanutils-1.11.0
 [63] Source available at https://github.com/merlimat/slog/tree/v0.9.9
 ------------------------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index c1b492ead00..8f8f1336149 100644
--- a/pom.xml
+++ b/pom.xml
@@ -144,7 +144,7 @@
     <commons-cli.version>1.9.0</commons-cli.version>
     <commons-collections4.version>4.1</commons-collections4.version>
     <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-configuration2.version>2.12.0</commons-configuration2.version>
+    <commons-configuration2.version>2.15.1</commons-configuration2.version>
     <commons-beanutils.version>1.11.0</commons-beanutils.version>
     <commons-compress.version>1.27.1</commons-compress.version>
     <commons-lang3.version>3.20.0</commons-lang3.version>