diff --git a/dev/deps/spark-deps-hadoop-3-hive-2.3 b/dev/deps/spark-deps-hadoop-3-hive-2.3
index 71f9ac8665b09..09291de503504 100644
--- a/dev/deps/spark-deps-hadoop-3-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3-hive-2.3
@@ -185,11 +185,11 @@ log4j-core/2.22.1//log4j-core-2.22.1.jar
 log4j-slf4j2-impl/2.22.1//log4j-slf4j2-impl-2.22.1.jar
 logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
 lz4-java/1.8.0//lz4-java-1.8.0.jar
-metrics-core/4.2.21//metrics-core-4.2.21.jar
-metrics-graphite/4.2.21//metrics-graphite-4.2.21.jar
-metrics-jmx/4.2.21//metrics-jmx-4.2.21.jar
-metrics-json/4.2.21//metrics-json-4.2.21.jar
-metrics-jvm/4.2.21//metrics-jvm-4.2.21.jar
+metrics-core/4.2.25//metrics-core-4.2.25.jar
+metrics-graphite/4.2.25//metrics-graphite-4.2.25.jar
+metrics-jmx/4.2.25//metrics-jmx-4.2.25.jar
+metrics-json/4.2.25//metrics-json-4.2.25.jar
+metrics-jvm/4.2.25//metrics-jvm-4.2.25.jar
 minlog/1.3.0//minlog-1.3.0.jar
 netty-all/4.1.106.Final//netty-all-4.1.106.Final.jar
 netty-buffer/4.1.106.Final//netty-buffer-4.1.106.Final.jar
diff --git a/pom.xml b/pom.xml
index d4e8a7db71de3..a5f2b6f74b7a1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -156,7 +156,7 @@
     If you change codahale.metrics.version, you also need to change
     the link to metrics.dropwizard.io in docs/monitoring.md.
     -->
-    <codahale.metrics.version>4.2.21</codahale.metrics.version>
+    <codahale.metrics.version>4.2.25</codahale.metrics.version>
     <!-- Should be consistent with SparkBuild.scala and docs -->
     <avro.version>1.11.3</avro.version>
     <aws.kinesis.client.version>1.12.0</aws.kinesis.client.version>