diff --git a/versions.lock b/versions.lock
index 3ee2e19..f707688 100644
--- a/versions.lock
+++ b/versions.lock
@@ -142,13 +142,13 @@ io.undertow:undertow-core:2.3.24.Final (4 constraints: 48496c73)
 
 joda-time:joda-time:2.12.7 (1 constraints: 2f16b1f1)
 
-org.apache.logging.log4j:log4j-api:2.25.3 (3 constraints: 282e753e)
+org.apache.logging.log4j:log4j-api:2.25.4 (3 constraints: 2b2e0c3f)
 
-org.apache.logging.log4j:log4j-core:2.25.3 (2 constraints: 4716173b)
+org.apache.logging.log4j:log4j-core:2.25.4 (2 constraints: 49164d3b)
 
-org.apache.logging.log4j:log4j-jul:2.25.3 (1 constraints: 3e05453b)
+org.apache.logging.log4j:log4j-jul:2.25.4 (1 constraints: 3f05463b)
 
-org.apache.logging.log4j:log4j-slf4j2-impl:2.25.3 (1 constraints: 3e05453b)
+org.apache.logging.log4j:log4j-slf4j2-impl:2.25.4 (1 constraints: 3f05463b)
 
 org.checkerframework:checker-qual:3.49.1 (1 constraints: 6a177b37)
 
diff --git a/versions.props b/versions.props
index 15073e4..6201d62 100644
--- a/versions.props
+++ b/versions.props
@@ -13,7 +13,7 @@ com.palantir.conjure.java:* = 8.74.0
 com.palantir.javapoet:javapoet = 0.12.0
 io.prometheus:prometheus-metrics-* = 1.5.1
 io.undertow:undertow-core = 2.3.24.Final
-org.apache.logging.log4j:* = 2.25.3
+org.apache.logging.log4j:* = 2.25.4
 org.assertj:assertj-core = 3.27.7
 org.junit.jupiter:junit-jupiter = 6.0.3
 org.slf4j:* = 2.0.17