diff --git a/pom.xml b/pom.xml
index ca3d14bf..9a4ba82c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -290,7 +290,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.9.1</version>
+      <version>2.16.0</version>
       <scope>runtime</scope>
     </dependency>
     <!-- We don't actually want commons-logging because it conflicts with slf4j, this is a trick to exclude it. See "Alternative 2" here: https://www.slf4j.org/faq.html#excludingJCL -->