diff --git a/CHANGELOG.md b/CHANGELOG.md
index d94963b43b..e0754ce575 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ## [Unreleased 3.0]
 ### Dependencies
 - Bumps `io.github.classgraph:classgraph` from 4.8.163 to 4.8.164
-- Bumps `org.owasp.dependencycheck` from 8.4.2 to 8.4.3
+- Bumps `org.owasp.dependencycheck` from 8.4.2 to 9.0.1
 
 This section is for maintaining a changelog for all breaking changes for the client that cannot be released in the 2.x line. All other non-breaking changes should be added to [Unreleased 2.x] section.
 
diff --git a/java-client/build.gradle.kts b/java-client/build.gradle.kts
index 198cd36206..d4e2f5625a 100644
--- a/java-client/build.gradle.kts
+++ b/java-client/build.gradle.kts
@@ -51,7 +51,7 @@ plugins {
     `java-library`
     `maven-publish`
     id("com.github.jk1.dependency-license-report") version "2.5"
-    id("org.owasp.dependencycheck") version "8.4.3"
+    id("org.owasp.dependencycheck") version "9.0.1"
     id("com.diffplug.spotless") version "6.22.0"
 }
 apply(plugin = "opensearch.repositories")