diff --git a/druid.yaml b/druid.yaml
index c52309925a1..62254e1ed74 100644
--- a/druid.yaml
+++ b/druid.yaml
@@ -1,7 +1,7 @@
 package:
   name: druid
   version: "35.0.1"
-  epoch: 1 # GHSA-84h7-rjj3-6jx4
+  epoch: 2 # GHSA-vc5p-v9hr-52mj
   description: Apache Druid is a high performance real-time analytics database.
   copyright:
     - license: Apache-2.0
diff --git a/druid/pombump-deps.yaml b/druid/pombump-deps.yaml
index 891f3e3224a..f7ca36f84e3 100644
--- a/druid/pombump-deps.yaml
+++ b/druid/pombump-deps.yaml
@@ -41,3 +41,6 @@ patches:
   - groupId: org.bouncycastle
     artifactId: bcpkix-jdk18on
     version: "1.79"
+  - groupId: org.apache.logging.log4j
+    artifactId: log4j-core
+    version: 2.25.3