diff --git a/helix-view-aggregator/pom.xml b/helix-view-aggregator/pom.xml
index 5f90da2d78..fbabb77fe1 100644
--- a/helix-view-aggregator/pom.xml
+++ b/helix-view-aggregator/pom.xml
@@ -70,7 +70,7 @@ under the License.
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
     </dependency>
     <dependency>
       <groupId>org.apache.helix</groupId>
diff --git a/pom.xml b/pom.xml
index c31af010c9..c0362145bd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -492,7 +492,7 @@
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-core</artifactId>
-        <version>2.17.1</version>
+        <version>2.25.3</version>
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>