diff --git a/javaee-legacy-app/pom.xml b/javaee-legacy-app/pom.xml
index 4faafc9..7e58516 100644
--- a/javaee-legacy-app/pom.xml
+++ b/javaee-legacy-app/pom.xml
@@ -86,7 +86,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.9.8</version>
+            <version>2.12.7.1</version>
         </dependency>
 
         <!-- Apache HttpClient 4.5.2 - CVE-2020-13956 (request smuggling) -->