The commons-codec library is now at version 1.12 and Openfire should be upgraded to use this version.
https://commons.apache.org/proper/commons-codec/