From bfd858ef7e7cac2f9410bc62000570ed2060a619 Mon Sep 17 00:00:00 2001
From: Philipp Page <pagejep@amazon.com>
Date: Thu, 2 Jul 2026 11:03:59 +0200
Subject: [PATCH] fix(deps): bump Jackson to 2.22.0 to address CVE-2026-54513

---
 .../powertools-examples-core-utilities/gradle/build.gradle  | 6 +++---
 examples/powertools-examples-kafka/tools/pom.xml            | 2 +-
 pom.xml                                                     | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/examples/powertools-examples-core-utilities/gradle/build.gradle b/examples/powertools-examples-core-utilities/gradle/build.gradle
index a228857c8..e94e28d4f 100644
--- a/examples/powertools-examples-core-utilities/gradle/build.gradle
+++ b/examples/powertools-examples-core-utilities/gradle/build.gradle
@@ -24,10 +24,10 @@ repositories {
 
 dependencies {
     implementation 'com.amazonaws:aws-lambda-java-core:1.2.2'
-    implementation 'com.fasterxml.jackson.core:jackson-annotations:2.13.2'
-    implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.2.2'
+    implementation 'com.fasterxml.jackson.core:jackson-annotations:2.22.0'
+    implementation 'com.fasterxml.jackson.core:jackson-databind:2.22.0'
     implementation 'com.amazonaws:aws-lambda-java-events:3.16.0'
-    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.13.2'
+    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.22.0'
     implementation 'org.aspectj:aspectjrt:1.9.20.1'
     aspect 'software.amazon.lambda:powertools-tracing:2.10.0'
     aspect 'software.amazon.lambda:powertools-logging-log4j:2.10.0'
diff --git a/examples/powertools-examples-kafka/tools/pom.xml b/examples/powertools-examples-kafka/tools/pom.xml
index bcb3d84d5..84bee97e2 100644
--- a/examples/powertools-examples-kafka/tools/pom.xml
+++ b/examples/powertools-examples-kafka/tools/pom.xml
@@ -35,7 +35,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.19.0</version>
+            <version>2.22.0</version>
         </dependency>
     </dependencies>
 
diff --git a/pom.xml b/pom.xml
index 6e4342768..c03e649c8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -85,7 +85,7 @@
         <maven.deploy.plugin.version>3.1.2</maven.deploy.plugin.version>
         <log4j.version>2.26.0</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <jackson.version>2.21.2</jackson.version>
+        <jackson.version>2.22.0</jackson.version>
         <aws.sdk.version>2.46.14</aws.sdk.version>
         <aws.xray.recorder.version>2.21.0</aws.xray.recorder.version>
         <payloadoffloading-common.version>2.2.0</payloadoffloading-common.version>