From 2d73358d5a95d480e13772d913d147aeb4022f2b Mon Sep 17 00:00:00 2001
From: Pascal Knupper <138479859+pascalknupper@users.noreply.github.com>
Date: Mon, 13 Jul 2026 08:16:00 +0200
Subject: [PATCH] bump jackson to address CVE-2026-54513

---
 .../powertools-examples-core-utilities/gradle/build.gradle  | 6 +++---
 examples/powertools-examples-kafka/tools/pom.xml            | 2 +-
 pom.xml                                                     | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/examples/powertools-examples-core-utilities/gradle/build.gradle b/examples/powertools-examples-core-utilities/gradle/build.gradle
index a228857c8..5a81bd53d 100644
--- a/examples/powertools-examples-core-utilities/gradle/build.gradle
+++ b/examples/powertools-examples-core-utilities/gradle/build.gradle
@@ -24,10 +24,10 @@ repositories {
 
 dependencies {
     implementation 'com.amazonaws:aws-lambda-java-core:1.2.2'
-    implementation 'com.fasterxml.jackson.core:jackson-annotations:2.13.2'
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.2.2'
+    implementation 'com.fasterxml.jackson.core:jackson-annotations:2.22.1'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.22.1'
     implementation 'com.amazonaws:aws-lambda-java-events:3.16.0'
-    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.13.2'
+    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.22.1'
     implementation 'org.aspectj:aspectjrt:1.9.20.1'
     aspect 'software.amazon.lambda:powertools-tracing:2.10.0'
     aspect 'software.amazon.lambda:powertools-logging-log4j:2.10.0'
diff --git a/examples/powertools-examples-kafka/tools/pom.xml b/examples/powertools-examples-kafka/tools/pom.xml
index bcb3d84d5..383cdfc97 100644
--- a/examples/powertools-examples-kafka/tools/pom.xml
+++ b/examples/powertools-examples-kafka/tools/pom.xml
@@ -35,7 +35,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.19.0</version>
+            <version>2.22.1</version>
         </dependency>
     </dependencies>
 
diff --git a/pom.xml b/pom.xml
index 8511bf78b..7fb787604 100644
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@
         <maven.deploy.plugin.version>3.1.2</maven.deploy.plugin.version>
         <log4j.version>2.26.0</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <jackson.version>2.21.2</jackson.version>
+        <jackson.version>2.22.1</jackson.version>
         <aws.sdk.version>2.47.3</aws.sdk.version>
         <aws.xray.recorder.version>2.21.0</aws.xray.recorder.version>
         <payloadoffloading-common.version>2.2.0</payloadoffloading-common.version>