diff --git a/History.md b/History.md
index 4e028a3f..285d444d 100644
--- a/History.md
+++ b/History.md
@@ -1,3 +1,11 @@
+2.3.3
+=======
+2021-12-21
+
+- updated logback from 1.2.3 to 1.2.9 https://github.com/ZUGFeRD/mustangproject/security/dependabot/validator/pom.xml/ch.qos.logback:logback-core/open
+- nor 2021-12-13 nor 2021-12-20 of https://github.com/mergebase/log4j-detector have complained so far
+
+
 2.3.2
 =======
 2021-12-16
diff --git a/validator/pom.xml b/validator/pom.xml
index 3ca235ab..a7b3edb6 100644
--- a/validator/pom.xml
+++ b/validator/pom.xml
@@ -47,12 +47,12 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.2.3</version>
+            <version>1.2.9</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.2.3</version>
+            <version>1.2.9</version>
         </dependency>
         <!-- https://mvnrepository.com/artifact/com.googlecode.slf4j-maven-plugin-log/slf4j-maven-plugin-log -->
         <dependency>