diff --git a/Changes b/Changes
index 6a82798..2e6d1a4 100644
--- a/Changes
+++ b/Changes
@@ -1,6 +1,9 @@
-0.60.1 2021-12-16
+0.60.1 2021-12-17
     - [feature] Added vc loading from classpath (margaretha)
     - [cleanup] Fixed missing VC to cleanup in VC Cache (margaretha)
+    - [security] Updated log4j due to CVE-2021-45046 (diewald)
+
+    !!! This is a security fix - please update!
 
 0.60 2021-12-10
     - [feature] Implemented a new cache with on disk
diff --git a/pom.xml b/pom.xml
index 685317b..a081e45 100644
--- a/pom.xml
+++ b/pom.xml
@@ -60,9 +60,9 @@
 
   <properties>
     <java.version>1.8</java.version>
-    <jersey.version>3.0.2</jersey.version>
-    <jackson.version>2.12.4</jackson.version>
-    <log4j.version>2.15.0</log4j.version>
+    <jersey.version>3.0.3</jersey.version>
+    <jackson.version>[2.12.4,)</jackson.version>
+    <log4j.version>[2.16.0,)</log4j.version>
     <lucene.version>5.0.0</lucene.version>
     <cobertura.version>2.7</cobertura.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>