diff --git a/ensemble/pom.xml b/ensemble/pom.xml
index c1f49387..739520ac 100644
--- a/ensemble/pom.xml
+++ b/ensemble/pom.xml
@@ -33,7 +33,7 @@
 	<dependency>
 		<groupId>org.apache.logging.log4j</groupId>
 		<artifactId>log4j-core</artifactId>
-		<version>2.23.1</version>
+		<version>2.25.3</version>
 	</dependency>
 	
 	<!-- Use Jackson 2.x instead of vulnerable jackson-mapper-asl 1.x -->
diff --git a/pom.xml b/pom.xml
index e32d6eac..886a99ca 100644
--- a/pom.xml
+++ b/pom.xml
@@ -438,7 +438,7 @@
 			<dependency>
 				<groupId>org.apache.logging.log4j</groupId>
 				<artifactId>log4j-core</artifactId>
-				<version>2.25.2</version>
+				<version>2.25.3</version>
 			</dependency>
 			
 			<dependency>