diff --git a/build.sbt b/build.sbt
index e6290b05e4..00753f4755 100644
--- a/build.sbt
+++ b/build.sbt
@@ -66,7 +66,7 @@ lazy val mimaSettings = Seq(
 
 lazy val protobufSettings = Seq(
   // The parentheses around the version help avoid version ambiguity in release scripts
-  ProtobufConfig / version := ("3.18.3"), // CVE-2021-22569
+  ProtobufConfig / version := ("3.25.4"), // CVE-2021-22569
   ProtobufConfig / sourceDirectory := baseDirectory.value / "src" / "main" / "proto",
   ProtobufConfig / protobufRunProtoc := (args => com.github.os72.protocjar.Protoc.runProtoc("-v351" +: args.toArray))
 )