diff --git a/build-tools-internal/version.properties b/build-tools-internal/version.properties
index 45f958d9ec095..cb5f385bf3f50 100644
--- a/build-tools-internal/version.properties
+++ b/build-tools-internal/version.properties
@@ -29,7 +29,7 @@ opensaml = 4.3.0
 
 # client dependencies
 httpclient        = 4.5.14
-httpcore          = 4.4.13
+httpcore          = 4.4.16
 httpasyncclient   = 4.1.5
 commonslogging    = 1.2
 commonscodec      = 1.15
diff --git a/gradle/build.versions.toml b/gradle/build.versions.toml
index 1aed327c45796..e86a6fe505861 100644
--- a/gradle/build.versions.toml
+++ b/gradle/build.versions.toml
@@ -19,7 +19,7 @@ docker-compose = "com.avast.gradle:gradle-docker-compose-plugin:0.17.5"
 forbiddenApis = "de.thetaphi:forbiddenapis:3.8"
 gradle-enterprise = "com.gradle:develocity-gradle-plugin:3.18.1"
 hamcrest = "org.hamcrest:hamcrest:2.1"
-httpcore = "org.apache.httpcomponents:httpcore:4.4.12"
+httpcore = "org.apache.httpcomponents:httpcore:4.4.16"
 httpclient = "org.apache.httpcomponents:httpclient:4.5.14"
 idea-ext = "gradle.plugin.org.jetbrains.gradle.plugin.idea-ext:gradle-idea-ext:1.1.4"
 javaparser = "com.github.javaparser:javaparser-core:3.18.0"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index c5f64342689f2..d66802f49b4c7 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -2598,11 +2598,6 @@
             <sha256 value="5324d2cbc2d311c9f91b82bcbc746ec2a29f1f5b744395a50ff3afb873db1cee" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.apache.httpcomponents" name="httpcore" version="4.4.12">
-         <artifact name="httpcore-4.4.12.jar">
-            <sha256 value="ab765334beabf0ea024484a5e90a7c40e8160b145f22d199e11e27f68d57da08" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
       <component group="org.apache.httpcomponents" name="httpcore" version="4.4.13">
          <artifact name="httpcore-4.4.13.jar">
             <sha256 value="e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424" origin="Generated by Gradle"/>
@@ -2618,9 +2613,9 @@
             <sha256 value="f7bc09dc8a7003822d109634ffd3845d579d12e725ae54673e323a7ce7f5e325" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.apache.httpcomponents" name="httpcore-nio" version="4.4.13">
-         <artifact name="httpcore-nio-4.4.13.jar">
-            <sha256 value="71fcfbe869002c48563cc5979fc734571c8d0d167ccce42970c932f337981f19" origin="Generated by Gradle"/>
+      <component group="org.apache.httpcomponents" name="httpcore-nio" version="4.4.16">
+         <artifact name="httpcore-nio-4.4.16.jar">
+            <sha256 value="4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4" origin="Generated by Gradle"/>
          </artifact>
       </component>
       <component group="org.apache.james" name="apache-mime4j-core" version="0.8.11">