diff --git a/lib/pom.xml b/lib/pom.xml
index 7b2a63e0559..feb8b012d94 100644
--- a/lib/pom.xml
+++ b/lib/pom.xml
@@ -68,7 +68,7 @@
         <jackcess.version>4.0.10</jackcess.version>
         <jackson-annotations.version>2.22</jackson-annotations.version>
         <!--check Beam BOM to find matching version https://repo1.maven.org/maven2/org/apache/beam/beam-runners-google-cloud-dataflow-java/xxx/beam-runners-google-cloud-dataflow-java-xxx.pom -->
-        <jackson.version>2.22.0</jackson.version>
+        <jackson.version>2.21.5</jackson.version>
         <jakarta-activation-api.version>2.1.4</jakarta-activation-api.version>
         <jakarta-annotation-api.version>3.0.0</jakarta-annotation-api.version>
         <jakarta-servlet-api.version>6.1.0</jakarta-servlet-api.version>
diff --git a/pom.xml b/pom.xml
index eb865cf2f0b..c577883f098 100644
--- a/pom.xml
+++ b/pom.xml
@@ -214,7 +214,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.21.1</version>
+                <version>2.21.5</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>