diff --git a/.build/parent-pom-template.xml b/.build/parent-pom-template.xml
index fcdea1465c..4ac3cee7bf 100644
--- a/.build/parent-pom-template.xml
+++ b/.build/parent-pom-template.xml
@@ -320,7 +320,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.6</version>
+        <version>2.11.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.commons</groupId>
diff --git a/CHANGES.txt b/CHANGES.txt
index d3ad294f62..c0cc42d5dc 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -1,4 +1,5 @@
 5.0
+ * Upgrade commons-io to 2.11.0 (CASSANDRA-17364)
  * Node Draining Should Abort All Current SSTables Imports (CASSANDRA-18373)
  * Use snake case for the names of CQL native functions (CASSANDRA-18037)
  * Use jdk-dependent checkstyle version to check the source code (CASSANDRA-18262)