diff --git a/History.md b/History.md
index 889de43e..36d225ac 100644
--- a/History.md
+++ b/History.md
@@ -1,6 +1,7 @@
 add signature comment into xml
 upgraded en16931 validation to 1.3.7
 xrechnung schematron 1.6.1
+updated logback from 1.2.3 to 1.2.9 https://github.com/ZUGFeRD/mustangproject/security/dependabot/validator/pom.xml/ch.qos.logback:logback-core/open
 
 2.3.2
 =======
diff --git a/validator/pom.xml b/validator/pom.xml
index a290387a..653d5f13 100644
--- a/validator/pom.xml
+++ b/validator/pom.xml
@@ -47,12 +47,12 @@
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.2.3</version>
+            <version>1.2.9</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-core</artifactId>
-            <version>1.2.3</version>
+            <version>1.2.9</version>
         </dependency>
         <!-- https://mvnrepository.com/artifact/com.googlecode.slf4j-maven-plugin-log/slf4j-maven-plugin-log -->
         <dependency>