diff --git a/WebGoat/Web.config b/WebGoat/Web.config
index 17b5d14..85d1aa2 100644
--- a/WebGoat/Web.config
+++ b/WebGoat/Web.config
@@ -136,6 +136,10 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
         <assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />
         <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="log4net" publicKeyToken="669e0ddf0bb1aa2a" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-2.0.17.0" newVersion="2.0.17.0" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
   <!--
diff --git a/WebGoat/WebGoat.NET.csproj b/WebGoat/WebGoat.NET.csproj
index 8db8356..b2f4fa5 100644
--- a/WebGoat/WebGoat.NET.csproj
+++ b/WebGoat/WebGoat.NET.csproj
@@ -55,8 +55,9 @@
     <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
   </PropertyGroup>
   <ItemGroup>
-    <Reference Include="log4net, Version=2.0.6.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a, processorArchitecture=MSIL">
-      <HintPath>..\packages\log4net.2.0.6\lib\net35-full\log4net.dll</HintPath>
+    <Reference Include="log4net, Version=2.0.17.0, Culture=neutral, PublicKeyToken=669e0ddf0bb1aa2a">
+      <HintPath>..\packages\log4net.2.0.17\lib\net35\log4net.dll</HintPath>
+      <Private>True</Private>
     </Reference>
     <Reference Include="Newtonsoft.Json, Version=9.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
       <HintPath>..\packages\Newtonsoft.Json.9.0.1\lib\net35\Newtonsoft.Json.dll</HintPath>
diff --git a/WebGoat/packages.config b/WebGoat/packages.config
index 5684ea8..af30618 100644
--- a/WebGoat/packages.config
+++ b/WebGoat/packages.config
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <packages>
   <package id="EntityFramework" version="6.1.0" targetFramework="net35" />
-  <package id="log4net" version="2.0.6" targetFramework="net35" />
+  <package id="log4net" version="2.0.17" targetFramework="net35" />
   <package id="Newtonsoft.Json" version="9.0.1" targetFramework="net35" />
 </packages>
\ No newline at end of file