diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index c7829c321fe..acb50511c3b 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -70,7 +70,7 @@
     <cassandra-driver.version>3.11.5</cassandra-driver.version>
     <commons-codec.version>1.17.1</commons-codec.version>
     <commons-compress.version>1.27.1</commons-compress.version>
-    <commons-csv.version>1.12.0</commons-csv.version>
+    <commons-csv.version>1.13.0</commons-csv.version>
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
     <commons-io.version>2.18.0</commons-io.version>
     <commons-lang3.version>3.17.0</commons-lang3.version>
diff --git a/pom.xml b/pom.xml
index 06d0b23d309..eccc67f4aac 100644
--- a/pom.xml
+++ b/pom.xml
@@ -340,7 +340,7 @@
     <maven.site.skip>true</maven.site.skip>
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
     <site-commons-compress.version>1.27.1</site-commons-compress.version>
-    <site-commons-csv.version>1.12.0</site-commons-csv.version>
+    <site-commons-csv.version>1.13.0</site-commons-csv.version>
     <site-commons-logging.version>1.3.4</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-disruptor.version>4.0.0</site-disruptor.version>
diff --git a/src/changelog/.2.x.x/update_org_apache_commons_commons_csv.xml b/src/changelog/.2.x.x/update_org_apache_commons_commons_csv.xml
index 79d07c1c7af..9d8320a12a4 100644
--- a/src/changelog/.2.x.x/update_org_apache_commons_commons_csv.xml
+++ b/src/changelog/.2.x.x/update_org_apache_commons_commons_csv.xml
@@ -3,6 +3,6 @@
        xmlns="https://logging.apache.org/xml/ns"
        xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
        type="updated">
-  <issue id="3014" link="https://github.com/apache/logging-log4j2/pull/3014"/>
-  <description format="asciidoc">Update `org.apache.commons:commons-csv` to version `1.12.0`</description>
+  <issue id="3389" link="https://github.com/apache/logging-log4j2/pull/3389"/>
+  <description format="asciidoc">Update `org.apache.commons:commons-csv` to version `1.13.0`</description>
 </entry>