diff --git a/licenses.yaml b/licenses.yaml
index 267d5e001950..f2d32fccaf2a 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1868,7 +1868,7 @@ name: Apache Log4j
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 2.22.1
+version: 2.25.3
 libraries:
   - org.apache.logging.log4j: log4j-1.2-api
   - org.apache.logging.log4j: log4j-api
diff --git a/pom.xml b/pom.xml
index bdc7975350dc..334dee6841eb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
         <jersey.version>1.19.4</jersey.version>
         <jackson.version>2.19.2</jackson.version>
         <codehaus.jackson.version>1.9.13</codehaus.jackson.version>
-        <log4j.version>2.22.1</log4j.version>
+        <log4j.version>2.25.3</log4j.version>
         <mysql.version>8.2.0</mysql.version>
         <mariadb.version>2.7.3</mariadb.version>
         <netty3.version>3.10.6.Final</netty3.version>