diff --git a/.github/workflows/blackduck.yaml b/.github/workflows/blackduck.yaml
index b690c9cd1..b016b5ac2 100644
--- a/.github/workflows/blackduck.yaml
+++ b/.github/workflows/blackduck.yaml
@@ -36,4 +36,4 @@ jobs:
           SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
           WORKFLOW: ${{ github.workflow }}
           WORKFLOW_RUN_URL: https://github.com/SAP/cloud-sdk-java/actions/runs/${{ github.run_id }}
-          BRANCH_NAME: ${{ github.ref_name }}
+          BRANCH_NAME: ${{ github.ref_name }}
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index a7bc78c22..f3b2f413c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,6 +123,8 @@
 		<jakarta-activation.version>2.1.0</jakarta-activation.version>
 		<qdox.version>2.2.0</qdox.version>
 		<wiremock.version>3.13.2</wiremock.version>
+		<handlebars.version>4.5.3</handlebars.version>
+		<commons-text.version>1.15.0</commons-text.version>
 		<checkstyle.version>12.3.1</checkstyle.version>
 		<byte-buddy.version>1.18.11</byte-buddy.version>
 		<snakeyaml.version>2.6</snakeyaml.version>
@@ -327,6 +329,25 @@
 				<artifactId>commons-beanutils</artifactId>
 				<version>${commons-beanutils.version}</version>
 			</dependency>
+			<!-- resolve vulnerability CVE-2026-55760 (handlebars is used transitively via wiremock) -->
+			<dependency>
+				<groupId>com.github.jknack</groupId>
+				<artifactId>handlebars</artifactId>
+				<version>${handlebars.version}</version>
+				<exclusions>
+					<!-- nashorn is not needed and violates Blackduck guidelines	-->
+					<exclusion>
+						<groupId>org.openjdk.nashorn</groupId>
+						<artifactId>nashorn-core</artifactId>
+					</exclusion>
+				</exclusions>
+			</dependency>
+			<!-- align commons-text version pulled transitively by handlebars and openapi-generator -->
+			<dependency>
+				<groupId>org.apache.commons</groupId>
+				<artifactId>commons-text</artifactId>
+				<version>${commons-text.version}</version>
+			</dependency>
 			<!--Dependencies with test scope-->
 			<dependency>
 				<groupId>com.sap.cloud.sdk</groupId>