diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5ab294ce8..a83c1a192 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `org.eclipse.parsson:parsson` from 1.1.6 to 1.1.7
 - Bumps `org.hamcrest:hamcrest` from 2.2 to 3.0
 - Bumps `com.github.jk1.dependency-license-report` from 2.8 to 2.9
+- Bump `org.owasp.dependencycheck` from 12.0.2 to 12.1.0 ([#1439](https://github.com/opensearch-project/opensearch-java/pull/1439))
 
 This section is for maintaining a changelog for all breaking changes for the client that cannot be released in the 2.x line. All other non-breaking changes should be added to [Unreleased 2.x] section.
 
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index c68f023f2..d1af5b046 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -52,7 +52,7 @@ plugins {
     `java-library`
     `maven-publish`
     id("com.github.jk1.dependency-license-report") version "2.9"
-    id("org.owasp.dependencycheck") version "12.0.2"
+    id("org.owasp.dependencycheck") version "12.1.0"
 
     id("opensearch-java.spotless-conventions")
 }