From 091f86ffa99c30cc1aaf6386cca042cc891962ae Mon Sep 17 00:00:00 2001
From: Ashwin Tumma <ashwin.tumma@salesforce.com>
Date: Mon, 29 Dec 2025 10:19:18 -0800
Subject: [PATCH] Bump org.apache.logging.log4j:log4j-core from 2.22.1 to
 2.25.3

---
 licenses.yaml | 2 +-
 pom.xml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 267d5e001950..f2d32fccaf2a 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1868,7 +1868,7 @@ name: Apache Log4j
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 2.22.1
+version: 2.25.3
 libraries:
   - org.apache.logging.log4j: log4j-1.2-api
   - org.apache.logging.log4j: log4j-api
diff --git a/pom.xml b/pom.xml
index bdc7975350dc..334dee6841eb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
         <jersey.version>1.19.4</jersey.version>
         <jackson.version>2.19.2</jackson.version>
         <codehaus.jackson.version>1.9.13</codehaus.jackson.version>
-        <log4j.version>2.22.1</log4j.version>
+        <log4j.version>2.25.3</log4j.version>
         <mysql.version>8.2.0</mysql.version>
         <mariadb.version>2.7.3</mariadb.version>
         <netty3.version>3.10.6.Final</netty3.version>