diff --git a/pom.xml b/pom.xml
index c738bcad5..d297a0df3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -202,7 +202,8 @@
         <!-- this property makes sure NetBeans 6.8+ picks up some formatting rules from checkstyle -->
         <netbeans.checkstyle.format>true</netbeans.checkstyle.format>
 
-        <jackson.version>2.18.6</jackson.version>
+        <!-- GHSA-r7wm-3cxj-wff9, CVE-2026-54512, CVE-2026-54513 are fixed in 2.18.8 -->
+        <jackson.version>2.18.9</jackson.version>
         <slf4j.version>2.0.17</slf4j.version>
         <swagger.version>1.6.11</swagger.version>
         <rhino.version>1.7.15.1</rhino.version>