diff --git a/logstash-core/build.gradle b/logstash-core/build.gradle
index 7e30ea734..7555176cd 100644
--- a/logstash-core/build.gradle
+++ b/logstash-core/build.gradle
@@ -151,10 +151,10 @@ def customJRubyDir = project.hasProperty("custom.jruby.path") ? project.property
 def customJRubyVersion = customJRubyDir == "" ? "" : Files.readAllLines(Paths.get(customJRubyDir, "VERSION")).get(0).trim()
 
 dependencies {
-    implementation 'org.apache.logging.log4j:log4j-api:2.12.1'
-    annotationProcessor 'org.apache.logging.log4j:log4j-core:2.12.1'
-    api 'org.apache.logging.log4j:log4j-core:2.12.1'
-    runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.12.1'
+    implementation 'org.apache.logging.log4j:log4j-api:2.13.3'
+    annotationProcessor 'org.apache.logging.log4j:log4j-core:2.13.3'
+    api 'org.apache.logging.log4j:log4j-core:2.13.3'
+    runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.13.3'
     implementation('org.reflections:reflections:0.9.11') {
         exclude group: 'com.google.guava', module: 'guava'
     }
@@ -178,7 +178,7 @@ dependencies {
         exclude group: 'com.google.guava', module: 'guava'
     }
     implementation 'org.javassist:javassist:3.26.0-GA'
-    testImplementation 'org.apache.logging.log4j:log4j-core:2.12.1:tests'
+    testImplementation 'org.apache.logging.log4j:log4j-core:2.13.3:tests'
     testImplementation 'junit:junit:4.12'
     testImplementation 'net.javacrumbs.json-unit:json-unit:2.3.0'
     testImplementation 'org.elasticsearch:securemock:1.2'