diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 771e42dc118..8a8d9de2397 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -75,7 +75,7 @@
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
     <commons-io.version>2.18.0</commons-io.version>
     <commons-lang3.version>3.17.0</commons-lang3.version>
-    <commons-logging.version>1.3.4</commons-logging.version>
+    <commons-logging.version>1.3.5</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
     <conversant.disruptor.version>1.2.15</conversant.disruptor.version>
     <disruptor.version>3.4.4</disruptor.version>
diff --git a/pom.xml b/pom.xml
index bb67727f5fe..381e9aec3c1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -341,7 +341,7 @@
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
     <site-commons-compress.version>1.27.1</site-commons-compress.version>
     <site-commons-csv.version>1.13.0</site-commons-csv.version>
-    <site-commons-logging.version>1.3.4</site-commons-logging.version>
+    <site-commons-logging.version>1.3.5</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-disruptor.version>4.0.0</site-disruptor.version>
     <site-flume.version>1.11.0</site-flume.version>