diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3497931140f3c..c66f04f3cce8c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - OpenJDK Update (July 2024 Patch releases) ([#14998](https://github.com/opensearch-project/OpenSearch/pull/14998))
 - Bump `com.microsoft.azure:msal4j` from 1.16.1 to 1.16.2 ([#14995](https://github.com/opensearch-project/OpenSearch/pull/14995))
 - Bump `actions/github-script` from 6 to 7 ([#14997](https://github.com/opensearch-project/OpenSearch/pull/14997))
+- Bump `org.tukaani:xz` from 1.9 to 1.10 ([#15110](https://github.com/opensearch-project/OpenSearch/pull/15110))
 
 ### Changed
 
diff --git a/plugins/ingest-attachment/build.gradle b/plugins/ingest-attachment/build.gradle
index d631855013527..81ac52b97cefa 100644
--- a/plugins/ingest-attachment/build.gradle
+++ b/plugins/ingest-attachment/build.gradle
@@ -66,7 +66,7 @@ dependencies {
   runtimeOnly "com.optimaize.languagedetector:language-detector:0.6"
   runtimeOnly "com.google.guava:guava:${versions.guava}"
   // Other dependencies
-  api 'org.tukaani:xz:1.9'
+  api 'org.tukaani:xz:1.10'
   api "commons-io:commons-io:${versions.commonsio}"
   api "org.slf4j:slf4j-api:${versions.slf4j}"
 
diff --git a/plugins/ingest-attachment/licenses/xz-1.10.jar.sha1 b/plugins/ingest-attachment/licenses/xz-1.10.jar.sha1
new file mode 100644
index 0000000000000..e3757c19ce5ab
--- /dev/null
+++ b/plugins/ingest-attachment/licenses/xz-1.10.jar.sha1
@@ -0,0 +1 @@
+1be8166f89e035a56c6bfc67dbc423996fe577e2
\ No newline at end of file
diff --git a/plugins/ingest-attachment/licenses/xz-1.9.jar.sha1 b/plugins/ingest-attachment/licenses/xz-1.9.jar.sha1
deleted file mode 100644
index c3e22d167212f..0000000000000
--- a/plugins/ingest-attachment/licenses/xz-1.9.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-1ea4bec1a921180164852c65006d928617bd2caf
\ No newline at end of file