diff --git a/contribs/vsp/pom.xml b/contribs/vsp/pom.xml
index 96a0cd8ca37..ac054f3b289 100644
--- a/contribs/vsp/pom.xml
+++ b/contribs/vsp/pom.xml
@@ -179,7 +179,7 @@
 		<dependency>
 			<groupId>com.graphhopper</groupId>
 			<artifactId>graphhopper-core</artifactId>
-			<version>7.0</version>
+			<version>8.0</version>
 		</dependency>
 		<!-- Enforce version -->
 		<dependency>
diff --git a/pom.xml b/pom.xml
index 44d423b0f53..0c79b29a8b7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -30,7 +30,7 @@
         <maven.compiler.release>17</maven.compiler.release>
         <argLine></argLine>
 
-        <log4j.version>2.20.0</log4j.version>
+        <log4j.version>2.21.0</log4j.version>
         <geotools.version>29.2</geotools.version>
         <jts.version>1.19.0</jts.version>
         <guice.version>7.0.0</guice.version>
@@ -469,7 +469,7 @@
                     <plugin>
                         <groupId>org.jacoco</groupId>
                         <artifactId>jacoco-maven-plugin</artifactId>
-                        <version>0.8.10</version>
+                        <version>0.8.11</version>
                         <executions>
                             <execution>
                                 <id>default-prepare-agent</id>