diff --git a/versions.lock b/versions.lock
index 6b6ea467e0d..25ad16593f7 100644
--- a/versions.lock
+++ b/versions.lock
@@ -201,13 +201,13 @@ org.apache.kerby:kerby-asn1:1.0.1 (1 constraints: fd0be9f4)
 org.apache.kerby:kerby-config:1.0.1 (4 constraints: 4d3182b9)
 org.apache.kerby:kerby-pkix:1.0.1 (1 constraints: 710bfce4)
 org.apache.kerby:kerby-util:1.0.1 (2 constraints: 6518bdb6)
-org.apache.logging.log4j:log4j-1.2-api:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-api:2.21.0 (10 constraints: f07d3453)
-org.apache.logging.log4j:log4j-core:2.21.0 (5 constraints: 5f510091)
-org.apache.logging.log4j:log4j-jul:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-layout-template-json:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-slf4j2-impl:2.21.0 (1 constraints: 3705363b)
-org.apache.logging.log4j:log4j-web:2.21.0 (1 constraints: 3705363b)
+org.apache.logging.log4j:log4j-1.2-api:2.22.1 (1 constraints: 39053a3b)
+org.apache.logging.log4j:log4j-api:2.22.1 (10 constraints: fc7d445f)
+org.apache.logging.log4j:log4j-core:2.22.1 (5 constraints: 6751e693)
+org.apache.logging.log4j:log4j-jul:2.22.1 (1 constraints: 39053a3b)
+org.apache.logging.log4j:log4j-layout-template-json:2.22.1 (1 constraints: 39053a3b)
+org.apache.logging.log4j:log4j-slf4j2-impl:2.22.1 (1 constraints: 39053a3b)
+org.apache.logging.log4j:log4j-web:2.22.1 (1 constraints: 39053a3b)
 org.apache.lucene:lucene-analysis-common:9.8.0 (10 constraints: fc9e4474)
 org.apache.lucene:lucene-analysis-icu:9.8.0 (1 constraints: 13053036)
 org.apache.lucene:lucene-analysis-kuromoji:9.8.0 (1 constraints: 13053036)
@@ -346,7 +346,7 @@ org.reactivestreams:reactive-streams:1.0.4 (3 constraints: 3f2b77fd)
 org.semver4j:semver4j:5.2.2 (1 constraints: 0b050c36)
 org.slf4j:jcl-over-slf4j:2.0.9 (3 constraints: cf17cfa6)
 org.slf4j:jul-to-slf4j:2.0.9 (3 constraints: 29286349)
-org.slf4j:slf4j-api:2.0.9 (59 constraints: e310a790)
+org.slf4j:slf4j-api:2.0.9 (59 constraints: e61013a0)
 org.tallison:isoparser:1.9.41.7 (1 constraints: fb0c5528)
 org.tallison:jmatio:1.5 (1 constraints: ff0b57e9)
 org.tallison:metadata-extractor:2.17.1.0 (1 constraints: f00c3b28)
diff --git a/versions.props b/versions.props
index cfa127e1094..88df2c39eab 100644
--- a/versions.props
+++ b/versions.props
@@ -47,7 +47,7 @@ org.apache.httpcomponents:httpclient=4.5.14
 org.apache.httpcomponents:httpcore=4.4.16
 org.apache.httpcomponents:httpmime=4.5.14
 org.apache.kerby:*=1.0.1
-org.apache.logging.log4j:*=2.21.0
+org.apache.logging.log4j:*=2.22.1
 org.apache.lucene:*=9.8.0
 org.apache.tika:*=1.28.5
 org.apache.tomcat:annotations-api=6.0.53