diff --git a/lock.sbt b/lock.sbt
index 6afa0ce7a..7c1b05dcd 100644
--- a/lock.sbt
+++ b/lock.sbt
@@ -6,8 +6,8 @@ Compile / dependencyOverrides ++= {
     Seq.empty
   } else {
     Seq(
-      "ch.qos.logback" % "logback-classic" % "1.3.14",
-      "ch.qos.logback" % "logback-core" % "1.3.14",
+      "ch.qos.logback" % "logback-classic" % "1.5.15",
+      "ch.qos.logback" % "logback-core" % "1.5.15",
       "com.auth0" % "java-jwt" % "4.4.0",
       "com.carrotsearch" % "hppc" % "0.7.1",
       "com.fasterxml.jackson.core" % "jackson-annotations" % "2.15.4",
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index f3a747e84..9fe5caa0c 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -104,11 +104,11 @@ object Dependencies {
     app_1      | SLF4J: Ignoring binding found at [jar:file:/home/owner/.cache/coursier/v1/https/repo1.maven.org/maven2/ch/qos/logback/logback-classic/1.2.11/logback-classic-1.2.11.jar!/org/slf4j/impl/StaticLoggerBinder.class]
     app_1      | SLF4J: See http://www.slf4j.org/codes.html#ignoredBindings for an explanation.
     */
-    val logbackClassic = "ch.qos.logback" % "logback-classic" % "1.3.14"
+    val logbackClassic = "ch.qos.logback" % "logback-classic" % "1.5.15"
 
     // https://mvnrepository.com/artifact/ch.qos.logback/logback-core
     // 1.3.x is for Java EE, 1.4.x is for Jakarta (which I don't think we use), otherwise identical.
-    val logbackCore = "ch.qos.logback" % "logback-core" % "1.3.14"
+    val logbackCore = "ch.qos.logback" % "logback-core" % "1.5.15"
 
     // Docs: https://github.com/logstash/logstash-logback-encoder/tree/logstash-logback-encoder-4.9
     val logstashLogbackEncoder = "net.logstash.logback" % "logstash-logback-encoder" % "7.4"