diff --git a/pom.xml b/pom.xml
index b8a9fe9b7b..7e4f6c76d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -66,7 +66,7 @@
         <!-- OpenCensus is used in grpc and Google's HTTP client libs in Cloud SDKs -->
         <opencensus.version>0.26.0</opencensus.version>
         <!-- Force log4j2 to 2.11+ to support objectMessageAsJsonObject -->
-        <log4jVersion>2.12.1</log4jVersion>
+        <log4jVersion>2.16.0</log4jVersion>
         <flyway.version>6.0.8</flyway.version>
         <joda.time.version>2.9.9</joda.time.version>
         <jakarta.validation.api.version>2.0.2</jakarta.validation.api.version>