diff --git a/build.sbt b/build.sbt
index ecd2a936..db904140 100644
--- a/build.sbt
+++ b/build.sbt
@@ -63,7 +63,7 @@ lazy val root = (project in file("."))
         "jackson-databind"
       ),
       // Transient dependency of Play. No newer version of Play 3.0.9 with this vulnerability fixed.
-      "ch.qos.logback" % "logback-classic" % "1.6.1",
+      "ch.qos.logback" % "logback-classic" % "1.6.3",
       "com.fasterxml.jackson.module" %% "jackson-module-scala" % "2.22.1"
     ),
     scalacOptions ++= List(