diff --git a/poishadow/build.gradle b/poishadow/build.gradle
index a6afdd12..633a81dd 100644
--- a/poishadow/build.gradle
+++ b/poishadow/build.gradle
@@ -17,7 +17,7 @@ dependencies {
     implementation 'stax:stax-api:1.0.1'
     // See https://github.com/apache/logging-log4j2/issues/2129 for an issue in 2.22.x
     // we may need to report issues again in the future if changes break on Android
-    implementation 'org.apache.logging.log4j:log4j-api:2.23.1'
+    implementation 'org.apache.logging.log4j:log4j-api:2.24.0'
 }
 
 shadowJar {
diff --git a/poitest/build.gradle b/poitest/build.gradle
index a62331a3..30353164 100644
--- a/poitest/build.gradle
+++ b/poitest/build.gradle
@@ -6,11 +6,11 @@ dependencies {
     implementation 'androidx.legacy:legacy-support-v4:1.0.0'
     // commons-text 1.8 fails due to Java 8 dependency
     implementation 'org.apache.commons:commons-text:1.12.0'
-    implementation 'org.apache.commons:commons-lang3:3.16.0'
+    implementation 'org.apache.commons:commons-lang3:3.17.0'
     // for unit-tests copied from Apache POI source, 1.64 did not work!
     //implementation 'org.bouncycastle:bcpkix-jdk15on:1.59'
     // there is a unit-tests executed in normal code currently...
-    implementation 'org.junit.vintage:junit-vintage-engine:5.10.3'
+    implementation 'org.junit.vintage:junit-vintage-engine:5.11.0'
 
     // newer versions of xmlsec are compiled with JDK 8 which does not work in Android Studio 2.x!
     /*implementation ('org.apache.santuario:xmlsec:2.2.1') {