Merge pull request advanced-security-demo#26 from advanced-security/securingdev-patch-1

Update pom.xml to fix breaking CodeQL scans

Author: securingdev

pom.xml

@@ -34,10 +34,15 @@
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
-            <artifactId>log4j</artifactId>
-            <version>2.16.0</version>
-            </dependency>
-        </dependencies>
+            <artifactId>log4j-core</artifactId>
+            <version>2.1</version>
+        </dependency>
+        <dependency>
+            <groupId>org.apache.logging.log4j</groupId>
+            <artifactId>log4j-api</artifactId>
+            <version>2.1</version>
+        </dependency>
+    </dependencies>
     <build>
         <plugins>
             <plugin>