diff --git a/pom.xml b/pom.xml
index bb3dd4d114..50186d373d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,8 @@
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
     <liquibase.version>4.25.0</liquibase.version>
-    <dropwizard.version>4.0.2</dropwizard.version>
+    <dropwizard.version>4.0.4</dropwizard.version>
+    <logback.version>1.4.14</logback.version>
     <pact.version>4.6.3</pact.version>
     <postgres.version>42.7.0</postgres.version>
     <surefire.version>3.2.2</surefire.version>
@@ -517,6 +518,25 @@
       <version>${dropwizard.version}</version>
     </dependency>
 
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-access</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-classic</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-core</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+
     <!--suppress VulnerableLibrariesLocal -->
     <dependency>
       <groupId>au.com.dius.pact</groupId>