diff --git a/pom.xml b/pom.xml
index 68de6dbc..7344592f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -42,7 +42,7 @@
 		<java.version>1.8</java.version>
 		<kamon.version>0.6.7</kamon.version>
 		<!-- using log4j 2.7 with Spring Boot 1.x -->
-		<log4j.version>2.13.3</log4j.version>
+		<log4j.version>2.17.1</log4j.version>
 		<disruptor.version>3.3.7</disruptor.version>
 		<dubbo.version>2.6.1</dubbo.version>
 		<spring.boot.version>1.5.14.RELEASE</spring.boot.version>