diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index ae138570c88..098cea96b57 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -729,6 +729,11 @@
             <sha256 value="cd53ce80636f9c0a4e84a9b78044042d4c2c5887339a0d9f977f701582002c8a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.groovy" name="groovy-bom" version="4.0.27">
+         <artifact name="groovy-bom-4.0.27.pom">
+            <sha256 value="aa44eb52bfdfe61d27b3e450d2b348d88deaa3437ab4d9d49a84095348f9f6fb" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.apache.httpcomponents" name="httpclient" version="4.5.14">
          <artifact name="httpclient-4.5.14.pom">
             <sha256 value="f18355af4cf80a8a4ef04ebd742a47e90a7eaf080c725b2095dbc4fc5dbdefb7" origin="Generated by Gradle"/>
@@ -754,6 +759,16 @@
             <sha256 value="3cbad849b35dacfe6cec31adada2c623c026c3261141b0d26eec7e399c6cd7fa" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j" version="2.25.4">
+         <artifact name="log4j-2.25.4.pom">
+            <sha256 value="f8ae8904a28e34fa04c35d3740619dae83632401ba1e313bafd7ccf5a3000dec" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
+      <component group="org.apache.logging.log4j" name="log4j-bom" version="2.25.4">
+         <artifact name="log4j-bom-2.25.4.pom">
+            <sha256 value="7313d339fb632a8610e1140b3290fc24d63743b9aa625e2a0bd59ded40a3ae54" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.checkerframework" name="checkerframework-gradle-plugin" version="0.6.60">
          <artifact name="checkerframework-gradle-plugin-0.6.60.jar">
             <sha256 value="3e992ff19fda07a4f2b2f05f5df412ba63af091a130512641aae12392b0c78ba" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -999,6 +1014,11 @@
             <sha256 value="cef80fec86454f6806bfb0df24669b5c6f32e2cb728539ea859f47dfdc9bbc17" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.junit" name="junit-bom" version="5.13.2">
+         <artifact name="junit-bom-5.13.2.pom">
+            <sha256 value="43b1104fb3fd4ef4b72a9751d41e09c29f001c8be00ff3972238dc169a734b49" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.junit" name="junit-bom" version="5.13.4">
          <artifact name="junit-bom-5.13.4.pom">
             <sha256 value="d7a08a99b2502f0bb68cd4e1f984f0bf69324aaa208bd0f73366c03fc3548a42" origin="Generated by Gradle"/>
@@ -1156,6 +1176,11 @@
             <sha256 value="fb40265f982548212ff82e362e59732b2187ec6f0d80182885c14ef1f982827a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.springframework" name="spring-framework-bom" version="5.3.39">
+         <artifact name="spring-framework-bom-5.3.39.pom">
+            <sha256 value="f6d481093e75767cba1ac7e1db38f8f692cbe3e38744693371a75aeb21c6148b" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.testcontainers" name="testcontainers-bom" version="1.21.3">
          <artifact name="testcontainers-bom-1.21.3.pom">
             <sha256 value="2ce717226d1d67b5b1df9707ed98022a366ac892d9e496c5f0173f1ab78a0965" origin="Generated by Gradle"/>
diff --git a/src/bom-thirdparty/build.gradle.kts b/src/bom-thirdparty/build.gradle.kts
index 51d51af50c7..82a53f8fd7e 100644
--- a/src/bom-thirdparty/build.gradle.kts
+++ b/src/bom-thirdparty/build.gradle.kts
@@ -114,7 +114,7 @@ dependencies {
         api("org.apache.httpcomponents:httpmime:4.5.14")
         api("org.apache.logging.log4j:log4j-1.2-api:2.25.3")
         api("org.apache.logging.log4j:log4j-api:2.25.3")
-        api("org.apache.logging.log4j:log4j-core:2.25.3")
+        api("org.apache.logging.log4j:log4j-core:2.25.4")
         api("org.apache.logging.log4j:log4j-slf4j2-impl:2.25.3")
         api("org.apache.rat:apache-rat:0.17")
         api("org.apache.tika:tika-core:3.2.3")