diff --git a/versions.lock b/versions.lock
index 96085db5283..373af46009e 100644
--- a/versions.lock
+++ b/versions.lock
@@ -202,13 +202,13 @@ org.apache.kerby:kerby-asn1:1.0.1 (1 constraints: fd0be9f4)
 org.apache.kerby:kerby-config:1.0.1 (4 constraints: 4d3182b9)
 org.apache.kerby:kerby-pkix:1.0.1 (1 constraints: 710bfce4)
 org.apache.kerby:kerby-util:1.0.1 (2 constraints: 6518bdb6)
-org.apache.logging.log4j:log4j-1.2-api:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-api:2.21.0 (10 constraints: f07d3453)
-org.apache.logging.log4j:log4j-core:2.21.0 (5 constraints: 5f510091)
-org.apache.logging.log4j:log4j-jul:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-layout-template-json:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-slf4j2-impl:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-web:2.21.0 (1 constraints: 3705363b)
+org.apache.logging.log4j:log4j-1.2-api:2.23.1 (1 constraints: 3a053d3b)
+org.apache.logging.log4j:log4j-api:2.23.1 (10 constraints: 027e5265)
+org.apache.logging.log4j:log4j-core:2.23.1 (5 constraints: 6b515d95)
+org.apache.logging.log4j:log4j-jul:2.23.1 (1 constraints: 3a053d3b)
+org.apache.logging.log4j:log4j-layout-template-json:2.23.1 (1 constraints: 3a053d3b)
+org.apache.logging.log4j:log4j-slf4j2-impl:2.23.1 (1 constraints: 3a053d3b)
+org.apache.logging.log4j:log4j-web:2.23.1 (1 constraints: 3a053d3b)
 org.apache.lucene:lucene-analysis-common:9.10.0 (10 constraints: 96a0f715)
 org.apache.lucene:lucene-analysis-icu:9.10.0 (1 constraints: 3c05593b)
 org.apache.lucene:lucene-analysis-kuromoji:9.10.0 (1 constraints: 3c05593b)
@@ -346,7 +346,7 @@ org.reactivestreams:reactive-streams:1.0.4 (3 constraints: 3f2b77fd)
 org.semver4j:semver4j:5.2.2 (1 constraints: 0b050c36)
 org.slf4j:jcl-over-slf4j:2.0.12 (3 constraints: f917acb5)
 org.slf4j:jul-to-slf4j:2.0.12 (3 constraints: 5328fa5e)
-org.slf4j:slf4j-api:2.0.12 (59 constraints: d5110b25)
+org.slf4j:slf4j-api:2.0.12 (59 constraints: d8117d34)
 org.tallison:isoparser:1.9.41.7 (1 constraints: fb0c5528)
 org.tallison:jmatio:1.5 (1 constraints: ff0b57e9)
 org.tallison:metadata-extractor:2.17.1.0 (1 constraints: f00c3b28)
diff --git a/versions.props b/versions.props
index 9b709679415..614d9042735 100644
--- a/versions.props
+++ b/versions.props
@@ -47,7 +47,7 @@ org.apache.httpcomponents:httpclient=4.5.14
 org.apache.httpcomponents:httpcore=4.4.16
 org.apache.httpcomponents:httpmime=4.5.14
 org.apache.kerby:*=1.0.1
-org.apache.logging.log4j:*=2.21.0
+org.apache.logging.log4j:*=2.23.1
 org.apache.lucene:*=9.10.0
 org.apache.tika:*=1.28.5
 org.apache.tomcat:annotations-api=6.0.53