diff --git a/build.gradle b/build.gradle
index e482e6e9..78099713 100644
--- a/build.gradle
+++ b/build.gradle
@@ -45,6 +45,13 @@ subprojects{
             options.addBooleanOption('html5', true)
         }
     }
+
+        // Mitigate CVE-2024-25710: Force commons-compress to 1.26.2
+        configurations.all {
+            resolutionStrategy {
+                force libs.commonsCompress
+            }
+        }
 }
 
 /**
diff --git a/gradle.properties b/gradle.properties
index 76837905..dcd939a1 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -12,4 +12,4 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
-#
+#
\ No newline at end of file
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 999f17d6..1a453527 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -19,6 +19,7 @@ snakeYaml = "2.0"
 #used for authz lib integration
 rundeck = "4.17.6-20240402"
 testcontainers = "1.21.3"
+commonsCompress = "1.26.2"
 
 [libraries]
 
@@ -50,6 +51,8 @@ rundeckAuthzYaml = { module = "org.rundeck:rundeck-authz-yaml", version.ref = "r
 testcontainers = { module = "org.testcontainers:testcontainers", version.ref = "testcontainers" }
 testcontainersSpock = { module = "org.testcontainers:spock", version.ref = "testcontainers" }
 
+commonsCompress = { module = "org.apache.commons:commons-compress", version.ref = "commonsCompress" }
+
 [bundles]
 
 retrofit = ["retrofitCore", "retrofitJackson", "retrofitJaxb", "okhttpLogging", "okhttpUrlconnection", "jaxb"]
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index fb3fb834..dd78b766 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -63,6 +63,7 @@
          <trusted-key id="2cecbfba181601547b654b9ffa81ac8a490f538e" group="org.apache.lucene"/>
          <trusted-key id="2db4f1ef0fa761ecc4ea935c86fdc7e2a11262cb">
             <trusting group="commons-codec" name="commons-codec" version="1.16.0"/>
+            <trusting group="commons-codec" name="commons-codec" version="1.17.0"/>
             <trusting group="commons-io"/>
             <trusting group="org.apache.commons"/>
             <trusting group="org.apache.commons" name="commons-text" version="1.8"/>
@@ -1859,6 +1860,11 @@
             <pgp value="84789d24df77a32433ce1f079eb80e92eb2135b1"/>
          </artifact>
       </component>
+      <component group="org.apache" name="apache" version="30">
+         <artifact name="apache-30.pom">
+            <sha256 value="63dd4a393a9c0dfcb314efe83871a41d243bc8d200cbc7f2d197f30da78239d8" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache" name="apache" version="4">
          <artifact name="apache-4.pom">
             <pgp value="6e13156c0ee653f0b984663ab95bbd3fa43c4492"/>
@@ -2050,6 +2056,11 @@
             <sha256 value="82d31f1dcc4583effd744e979165b16da64bf86bca623fc5d1b03ed94f45c85a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.commons" name="commons-lang3" version="3.14.0">
+         <artifact name="commons-lang3-3.14.0.pom">
+            <sha256 value="110438863bad37c28f906bf87016e38c7a8c758ba321e09d11dc5a2363a8e79e" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.commons" name="commons-lang3" version="3.8.1">
          <artifact name="commons-lang3-3.8.1.jar">
             <sha256 value="dac807f65b07698ff39b1b07bfef3d87ae3fd46d91bbf8a2bc02b2a831616f68" origin="Generated by Gradle"/>
@@ -2120,6 +2131,11 @@
             <sha256 value="75dbe8f34e98e4c3ff42daae4a2f9eb4cbcd3b5f1047d54460ace906dbb4502e" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.commons" name="commons-parent" version="64">
+         <artifact name="commons-parent-64.pom">
+            <sha256 value="6f19638994e8357b4ed734696f992057efaafa1235673998133299798e2ccddb" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.commons" name="commons-pool2" version="2.10.0">
          <artifact name="commons-pool2-2.10.0.jar">
             <sha256 value="d80021de162f9570252b281ddf6f5e2ad876f0c196f4d1dbe85ab0a5b0dca554" origin="Generated by Gradle"/>
@@ -3941,6 +3957,11 @@
             <sha256 value="52c5bcea815708a396aaceb14199b96798fc3219ad05236f01a2adb4c85e9061" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.junit" name="junit-bom" version="5.10.0">
+         <artifact name="junit-bom-5.10.0.pom">
+            <sha256 value="e006dd8894f9fc7b75fc32bb12fe5ed8be65667d5b454f99e2e0b8c5bb8d30b3" origin="Generated by Gradle because artifact wasn't signed"/>
+         </artifact>
+      </component>
       <component group="org.junit" name="junit-bom" version="5.7.1">
          <artifact name="junit-bom-5.7.1.module">
             <sha256 value="9854e3894d64b2485207e0046bca07b3d42d169e782f4fa8c9ce229a78faee04" origin="Generated by Gradle"/>