diff --git a/common/build.gradle b/common/build.gradle
index 109cad59cb..5386c32468 100644
--- a/common/build.gradle
+++ b/common/build.gradle
@@ -35,7 +35,7 @@ repositories {
 dependencies {
     api "org.antlr:antlr4-runtime:4.7.1"
     api group: 'com.google.guava', name: 'guava', version: '32.0.1-jre'
-    api group: 'org.apache.logging.log4j', name: 'log4j-core', version:'2.20.0'
+    api group: 'org.apache.logging.log4j', name: 'log4j-core', version:'2.21.0'
     api group: 'org.apache.commons', name: 'commons-lang3', version: '3.12.0'
     api group: 'com.squareup.okhttp3', name: 'okhttp', version: '4.9.3'
     implementation 'com.github.babbel:okhttp-aws-signer:1.0.2'
diff --git a/ppl/build.gradle b/ppl/build.gradle
index 04ad71ced6..d0d9fe3cbf 100644
--- a/ppl/build.gradle
+++ b/ppl/build.gradle
@@ -50,7 +50,7 @@ dependencies {
     implementation "org.antlr:antlr4-runtime:4.7.1"
     implementation group: 'com.google.guava', name: 'guava', version: '32.0.1-jre'
     api group: 'org.json', name: 'json', version: '20231013'
-    implementation group: 'org.apache.logging.log4j', name: 'log4j-core', version:'2.20.0'
+    implementation group: 'org.apache.logging.log4j', name: 'log4j-core', version:'2.21.0'
     api project(':common')
     api project(':core')
     api project(':protocol')