From aae4ca01ebfa3196da86f64f0b49e48aa38eb84e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 22:50:33 +0000
Subject: [PATCH] Bump org.apache.logging.log4j:log4j-core from 2.17.1 to
 2.25.3

Bumps org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 helix-core/pom.xml            | 2 +-
 helix-view-aggregator/pom.xml | 2 +-
 pom.xml                       | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/helix-core/pom.xml b/helix-core/pom.xml
index 63f1127f6a..4307f88eb0 100644
--- a/helix-core/pom.xml
+++ b/helix-core/pom.xml
@@ -81,7 +81,7 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
diff --git a/helix-view-aggregator/pom.xml b/helix-view-aggregator/pom.xml
index 5f90da2d78..fbabb77fe1 100644
--- a/helix-view-aggregator/pom.xml
+++ b/helix-view-aggregator/pom.xml
@@ -70,7 +70,7 @@ under the License.
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
     </dependency>
     <dependency>
       <groupId>org.apache.helix</groupId>
diff --git a/pom.xml b/pom.xml
index c31af010c9..c0362145bd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -492,7 +492,7 @@
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-core</artifactId>
-        <version>2.17.1</version>
+        <version>2.25.3</version>
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>