diff --git a/docs/legal/CREDITS.json b/docs/legal/CREDITS.json
index e8befe0d1..bc4e11cd4 100644
--- a/docs/legal/CREDITS.json
+++ b/docs/legal/CREDITS.json
@@ -4,7 +4,6 @@
     "link": "https://github.com/chocolatey/choco",
     "licenseName": "LICENSE",
     "licenseLink": "https://github.com/chocolatey/choco/blob/master/LICENSE",
-    "version": "2.7.0",
     "dependencies": [
         {
             "name": "7-Zip",
@@ -57,11 +56,11 @@
         {
             "name": "log4net",
             "link": "https://github.com/apache/logging-log4net",
-            "version": "rel/3.2.0",
+            "version": "rel/3.3.1",
             "licenses": [
                 {
                     "type": "Apache-2.0",
-                    "link": "https://github.com/apache/logging-log4net/blob/5e9e2b0ea8a57a441e779d23429f6759a06d93ce/LICENSE",
+                    "link": "https://github.com/apache/logging-log4net/blob/7fcc7f425b81b9df7c8a8719ed90953b938cd10e/LICENSE",
                     "name": "LICENSE"
                 }
             ]
diff --git a/docs/legal/CREDITS.md b/docs/legal/CREDITS.md
index 345e56de4..75f4c9691 100644
--- a/docs/legal/CREDITS.md
+++ b/docs/legal/CREDITS.md
@@ -16,7 +16,7 @@ Chocolatey uses a number of 3rd party components. Their details are below.
   * [Apache v2.0 License](#apache-v20-license-1)
     * [Checksum@0.3.1](#checksum031)
     * [Chocolatey.NuGet.Client@3.5.0](#chocolateynugetclient350)
-    * [log4net@rel/3.2.0](#log4netrel320)
+    * [log4net@rel/3.3.1](#log4netrel331)
   * [BSD-3-Clause](#bsd-3-clause-1)
     * [Rhino.Licensing@1.4.1](#rhinolicensing141)
   * [MIT License](#mit-license-1)
@@ -297,9 +297,9 @@ https://www.apache.org/licenses/LICENSE-2.0
 
 [Chocolatey.NuGet.Client](https://github.com/NuGet/NuGet.Client) [(modified)](https://github.com/chocolatey/NuGet.Client) - [License terms.](https://github.com/chocolatey/NuGet.Client/blob/d08e5cc246b384fd424e99371168d7cf4534723e/LICENSE.txt)
 
-#### log4net@rel/3.2.0
+#### log4net@rel/3.3.1
 
-[log4net](https://github.com/apache/logging-log4net) - [License terms.](https://github.com/apache/logging-log4net/blob/5e9e2b0ea8a57a441e779d23429f6759a06d93ce/LICENSE)
+[log4net](https://github.com/apache/logging-log4net) - [License terms.](https://github.com/apache/logging-log4net/blob/7fcc7f425b81b9df7c8a8719ed90953b938cd10e/LICENSE)
 
 ### BSD-3-Clause
 
diff --git a/docs/legal/CREDITS.pdf b/docs/legal/CREDITS.pdf
index 67b57db9c..5ba67ef26 100644
Binary files a/docs/legal/CREDITS.pdf and b/docs/legal/CREDITS.pdf differ
diff --git a/src/chocolatey/chocolatey.csproj b/src/chocolatey/chocolatey.csproj
index 2ae9c50fd..ff8ce55f4 100644
--- a/src/chocolatey/chocolatey.csproj
+++ b/src/chocolatey/chocolatey.csproj
@@ -94,7 +94,7 @@
   <ItemGroup>
     <PackageReference Include="AlphaFS" Version="2.2.6" />
     <PackageReference Include="Chocolatey.NuGet.PackageManagement" Version="3.5.0" />
-    <PackageReference Include="log4net" Version="3.2.0" />
+    <PackageReference Include="log4net" Version="3.3.1" />
     <PackageReference Include="Microsoft.Bcl.HashCode" Version="6.0.0" />
     <PackageReference Include="Microsoft.CodeAnalysis.BannedApiAnalyzers">
       <Version>3.3.4</Version>