diff --git a/agentspaces-dependencies/pom.xml b/agentspaces-dependencies/pom.xml
index 80c4977..833abb7 100644
--- a/agentspaces-dependencies/pom.xml
+++ b/agentspaces-dependencies/pom.xml
@@ -82,7 +82,7 @@
     <maven-gpg-plugin.version>3.2.8</maven-gpg-plugin.version>
     <central-publishing-maven-plugin.version>0.9.0</central-publishing-maven-plugin.version>
 
-    <jackson.version>2.21.7</jackson.version>
+    <jackson.version>2.22.3</jackson.version>
     <caffeine.version>3.2.0</caffeine.version>
     <nimbus-jose-jwt.version>10.3</nimbus-jose-jwt.version>
     <bouncycastle.version>1.86</bouncycastle.version>
diff --git a/pom.xml b/pom.xml
index 158485a..f338e97 100644
--- a/pom.xml
+++ b/pom.xml
@@ -114,7 +114,7 @@
          application runs the canonical CBOR codec on the Jackson it was tested
          with. Any Jackson bump must keep the golden-vector suites green
          (they pin the canonical bytes); see docs/BUILD-ENVIRONMENTS.md. -->
-    <jackson.version>2.21.7</jackson.version>
+    <jackson.version>2.22.3</jackson.version>
     <caffeine.version>3.2.0</caffeine.version>
     <nimbus-jose-jwt.version>10.3</nimbus-jose-jwt.version>
     <bouncycastle.version>1.86</bouncycastle.version>