diff --git a/.build/build-owasp.xml b/.build/build-owasp.xml
index 1c26e7ab95..2670c9ae36 100644
--- a/.build/build-owasp.xml
+++ b/.build/build-owasp.xml
@@ -19,7 +19,7 @@
 <project basedir="." name="apache-cassandra-owasp-tasks"
          xmlns:unless="ant:unless"
          xmlns:if="ant:if">
-    <property name="dependency-check.version" value="9.0.5"/>
+    <property name="dependency-check.version" value="10.0.0"/>
     <property name="dependency-check.home" value="${tmp.dir}/dependency-check-ant-${dependency-check.version}"/>
     <property name="dependency-check.archive.dir" value="${local.repository}/org/owasp/dependency-check-ant/${dependency-check.version}"/>
     <property name="dependency-check.archive.name" value="dependency-check-ant-${dependency-check.version}-release.zip"/>
diff --git a/CHANGES.txt b/CHANGES.txt
index eefd3077ad..e33d453ade 100644
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -117,6 +117,7 @@ Merged from 4.0:
 Merged from 3.11:
  * Move ClientWarn.State#warnings to a thread-safe list (CASSANDRA-19427)
 Merged from 3.0:
+ * Upgrade OWASP to 10.0.0 (CASSANDRA-19738)
  * Fix SCM URL link (CASSANDRA-19422)
  * Backport CASSANDRA-16418 to 3.x (CASSANDRA-18824)