diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 8302fab4d2f..8ac893121d0 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -74,7 +74,7 @@
     <commons-csv.version>1.14.0</commons-csv.version>
     <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
     <commons-io.version>2.19.0</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <commons-lang3.version>3.18.0</commons-lang3.version>
     <commons-logging.version>1.3.5</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
     <conversant.disruptor.version>1.2.15</conversant.disruptor.version>