diff --git a/CHANGELOG.md b/CHANGELOG.md
index d67cc93fc476d..5d31a2030420b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,7 +21,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Upgrade netty to 4.1.84.Final ([#4893](https://github.com/opensearch-project/OpenSearch/pull/4893))
 - Bump reactor-netty-http to 1.0.24 in repository-azure ([#4920](https://github.com/opensearch-project/OpenSearch/pull/4920))
 - Bump `tika` from 2.4.0 to 2.5.0 ([#4929](https://github.com/opensearch-project/OpenSearch/pull/4929))
-
+- Bump `woodstox-core` to 6.4.0 ([#4950](https://github.com/opensearch-project/OpenSearch/pull/4950))
 ### Changed
 - Dependency updates (httpcore, mockito, slf4j, httpasyncclient, commons-codec) ([#4308](https://github.com/opensearch-project/OpenSearch/pull/4308))
 - Use RemoteSegmentStoreDirectory instead of RemoteDirectory ([#4240](https://github.com/opensearch-project/OpenSearch/pull/4240))
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index 43872cdea2d49..4e72519c935b1 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -17,6 +17,7 @@ supercsv          = 2.4.0
 log4j             = 2.17.1
 slf4j             = 1.6.2
 jettison          = 1.5.1
+woodstox          = 6.4.0
 
 # when updating the JNA version, also update the version in buildSrc/build.gradle
 jna               = 5.5.0
diff --git a/plugins/repository-azure/build.gradle b/plugins/repository-azure/build.gradle
index 821cc7592c290..42c5b9c57f8f4 100644
--- a/plugins/repository-azure/build.gradle
+++ b/plugins/repository-azure/build.gradle
@@ -67,7 +67,7 @@ dependencies {
   api "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${versions.jackson}"
   api "com.fasterxml.jackson.module:jackson-module-jaxb-annotations:${versions.jackson}"
   api 'org.codehaus.woodstox:stax2-api:4.2.1'
-  implementation 'com.fasterxml.woodstox:woodstox-core:6.2.8'
+  implementation "com.fasterxml.woodstox:woodstox-core:${versions.woodstox}"
   runtimeOnly 'com.google.guava:guava:31.1-jre'
   api 'org.apache.commons:commons-lang3:3.12.0'
   testImplementation project(':test:fixtures:azure-fixture')
diff --git a/plugins/repository-azure/licenses/woodstox-core-6.2.8.jar.sha1 b/plugins/repository-azure/licenses/woodstox-core-6.2.8.jar.sha1
deleted file mode 100644
index ae65cdebf26de..0000000000000
--- a/plugins/repository-azure/licenses/woodstox-core-6.2.8.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-670748292899c53b1963730d9eb7f8ab71314e90
\ No newline at end of file
diff --git a/plugins/repository-azure/licenses/woodstox-core-6.4.0.jar.sha1 b/plugins/repository-azure/licenses/woodstox-core-6.4.0.jar.sha1
new file mode 100644
index 0000000000000..cac5f37205956
--- /dev/null
+++ b/plugins/repository-azure/licenses/woodstox-core-6.4.0.jar.sha1
@@ -0,0 +1 @@
+c47579857bbf12c85499f431d4ecf27d77976b7c
\ No newline at end of file
diff --git a/plugins/repository-hdfs/build.gradle b/plugins/repository-hdfs/build.gradle
index 5e1ca2917499a..62e845c1ad6e3 100644
--- a/plugins/repository-hdfs/build.gradle
+++ b/plugins/repository-hdfs/build.gradle
@@ -83,7 +83,7 @@ dependencies {
   api 'net.minidev:json-smart:2.4.7'
   api 'org.apache.zookeeper:zookeeper:3.7.0'
   api "io.netty:netty-all:${versions.netty}"
-  implementation 'com.fasterxml.woodstox:woodstox-core:6.2.8'
+  implementation "com.fasterxml.woodstox:woodstox-core:${versions.woodstox}"
   implementation 'org.codehaus.woodstox:stax2-api:4.2.1'
 
   hdfsFixture project(':test:fixtures:hdfs-fixture')
diff --git a/plugins/repository-hdfs/licenses/woodstox-core-6.2.8.jar.sha1 b/plugins/repository-hdfs/licenses/woodstox-core-6.2.8.jar.sha1
deleted file mode 100644
index ae65cdebf26de..0000000000000
--- a/plugins/repository-hdfs/licenses/woodstox-core-6.2.8.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-670748292899c53b1963730d9eb7f8ab71314e90
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/woodstox-core-6.4.0.jar.sha1 b/plugins/repository-hdfs/licenses/woodstox-core-6.4.0.jar.sha1
new file mode 100644
index 0000000000000..cac5f37205956
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/woodstox-core-6.4.0.jar.sha1
@@ -0,0 +1 @@
+c47579857bbf12c85499f431d4ecf27d77976b7c
\ No newline at end of file
diff --git a/test/fixtures/hdfs-fixture/build.gradle b/test/fixtures/hdfs-fixture/build.gradle
index 7519891f96cc9..cf15f00af6cfa 100644
--- a/test/fixtures/hdfs-fixture/build.gradle
+++ b/test/fixtures/hdfs-fixture/build.gradle
@@ -45,5 +45,6 @@ dependencies {
   api "org.bouncycastle:bcpkix-jdk15on:${versions.bouncycastle}"
   api "com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider:${versions.jackson}"
   api "com.fasterxml.jackson.core:jackson-databind:${versions.jackson_databind}"
+  api "com.fasterxml.woodstox:woodstox-core:${versions.woodstox}"
   api 'net.minidev:json-smart:2.4.8'
 }