diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 3561b842a..be2ef4c41 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -144,7 +144,7 @@ junit-v4-13-1 = { module = "junit:junit", version = "4.13.1" }
 kms = { module = "software.amazon.awssdk:kms", version = "2.15.28" }
 libphonenumber = { module = "com.googlecode.libphonenumber:libphonenumber", version = "8.12.50" }
 listenablefuture = { module = "com.google.guava:listenablefuture", version = "9999.0-empty-to-avoid-conflict-with-guava" }
-log4j-1-2-api = { module = "org.apache.logging.log4j:log4j-1.2-api", version = "2.25.3" }
+log4j-1-2-api = { module = "org.apache.logging.log4j:log4j-1.2-api", version = "2.25.4" }
 log4j-api = { module = "org.apache.logging.log4j:log4j-api", version = "2.25.3" }
 log4j-core = { module = "org.apache.logging.log4j:log4j-core", version = "2.25.3" }
 management-api = { module = "org.glassfish.external:management-api", version = "3.2.1-b001" }
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index cafb3fdca..3df6c03fc 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1889,6 +1889,11 @@
             <sha256 value="a5b748245ae2b396f5bca947a496edc08dbdbdf7969ae2ccb1ab6d4b49739e7f" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j" version="2.25.4">
+         <artifact name="log4j-2.25.4.pom">
+            <sha256 value="f8ae8904a28e34fa04c35d3740619dae83632401ba1e313bafd7ccf5a3000dec" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.logging.log4j" name="log4j-1.2-api" version="2.25.3">
          <artifact name="log4j-1.2-api-2.25.3.jar">
             <sha256 value="72aab8a06335962bfd441605cb4da94777798f699414e02931d29e63fd12ace4" origin="Generated by Gradle"/>
@@ -1900,6 +1905,14 @@
             <sha256 value="5db83acd3fee01e43f9ddb41b7a6e38e58e231f6a9d85cdbb65ae3324827d767" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j-1.2-api" version="2.25.4">
+         <artifact name="log4j-1.2-api-2.25.4.jar">
+            <sha256 value="7b1a61507950ea67b3d6b11437ee37fad9db06f855c92c25c08aee074c757395" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="log4j-1.2-api-2.25.4.module">
+            <sha256 value="ac8e0f5dee9933a353ac2f0ea3451c1edd4dcd8cf5a7a82f34eea1c1a5dae77c" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.logging.log4j" name="log4j-api" version="2.25.3">
          <artifact name="log4j-api-2.25.3.jar">
             <sha256 value="e886682920fa0fb9d6eb6395dcb4de088443f8646c89c5e5846e168e327f406f" origin="Generated by Gradle"/>
@@ -1921,6 +1934,11 @@
             <sha256 value="665788087128fe6c3af9d0252448532af978711766481db49396bf0325a26cad" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j-bom" version="2.25.4">
+         <artifact name="log4j-bom-2.25.4.pom">
+            <sha256 value="7313d339fb632a8610e1140b3290fc24d63743b9aa625e2a0bd59ded40a3ae54" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.logging.log4j" name="log4j-core" version="2.25.3">
          <artifact name="log4j-core-2.25.3.jar">
             <sha256 value="362b7fcb65b73aa46cc4bc53abf4eb216f444a83b5d1a037cb6fdfff0ae9f0f9" origin="Generated by Gradle"/>