diff --git a/pom.xml b/pom.xml
index b1e3bc17..80961ffa 100644
--- a/pom.xml
+++ b/pom.xml
@@ -58,6 +58,7 @@
     -->
     <pac4jVersion>6.4.3</pac4jVersion>
     <hpi.bundledArtifacts>content-type,jmespath-core,lang-tag,oauth2-oidc-sdk,pac4j-core,pac4j-jakartaee,pac4j-oidc,protobuf-java,tink</hpi.bundledArtifacts>
+    <ban-commons-lang-2.skip>false</ban-commons-lang-2.skip>
   </properties>
 
   <dependencyManagement>
diff --git a/src/main/java/org/jenkinsci/plugins/oic/properties/DisableTokenVerification.java b/src/main/java/org/jenkinsci/plugins/oic/properties/DisableTokenVerification.java
index b99906a3..93cd61f1 100644
--- a/src/main/java/org/jenkinsci/plugins/oic/properties/DisableTokenVerification.java
+++ b/src/main/java/org/jenkinsci/plugins/oic/properties/DisableTokenVerification.java
@@ -4,7 +4,7 @@
 import hudson.Extension;
 import java.io.Serial;
 import jenkins.security.FIPS140;
-import org.apache.commons.lang.Validate;
+import org.apache.commons.lang3.Validate;
 import org.jenkinsci.plugins.oic.AnythingGoesTokenValidator;
 import org.jenkinsci.plugins.oic.OicServerConfiguration;
 import org.jenkinsci.plugins.oic.OidcProperty;
diff --git a/src/main/java/org/jenkinsci/plugins/oic/properties/EscapeHatch.java b/src/main/java/org/jenkinsci/plugins/oic/properties/EscapeHatch.java
index eabcf75b..9e874d83 100644
--- a/src/main/java/org/jenkinsci/plugins/oic/properties/EscapeHatch.java
+++ b/src/main/java/org/jenkinsci/plugins/oic/properties/EscapeHatch.java
@@ -1,6 +1,6 @@
 package org.jenkinsci.plugins.oic.properties;
 
-import static org.apache.commons.lang.StringUtils.isNotBlank;
+import static org.apache.commons.lang3.StringUtils.isNotBlank;
 
 import edu.umd.cs.findbugs.annotations.CheckForNull;
 import edu.umd.cs.findbugs.annotations.NonNull;