diff --git a/.github/workflows/blackduck.yaml b/.github/workflows/blackduck.yaml
index b690c9cd1..226618bb4 100644
--- a/.github/workflows/blackduck.yaml
+++ b/.github/workflows/blackduck.yaml
@@ -16,24 +16,10 @@ jobs:
     timeout-minutes: 15
     steps:
       - uses: actions/checkout@v7
+        with:
+          ref: cve-fixing
       - name: "Scan With Black Duck"
         uses: ./.github/actions/scan-with-blackduck
         with:
           token: ${{ secrets.BLACKDUCK_TOKEN }}
 
-  notify-job:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-    needs: [ scan ]
-    if: ${{ failure() && github.ref == 'refs/heads/main' }}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-      - name: Notify
-        run: python .pipeline/scripts/notify.py
-        env:
-          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
-          WORKFLOW: ${{ github.workflow }}
-          WORKFLOW_RUN_URL: https://github.com/SAP/cloud-sdk-java/actions/runs/${{ github.run_id }}
-          BRANCH_NAME: ${{ github.ref_name }}
diff --git a/pom.xml b/pom.xml
index 0d10a82e5..3adea375e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -123,6 +123,8 @@
 		<jakarta-activation.version>2.1.0</jakarta-activation.version>
 		<qdox.version>2.2.0</qdox.version>
 		<wiremock.version>3.13.2</wiremock.version>
+		<handlebars.version>4.5.3</handlebars.version>
+		<commons-text.version>1.15.0</commons-text.version>
 		<checkstyle.version>12.3.1</checkstyle.version>
 		<byte-buddy.version>1.18.11</byte-buddy.version>
 		<snakeyaml.version>2.6</snakeyaml.version>
@@ -327,6 +329,18 @@
 				<artifactId>commons-beanutils</artifactId>
 				<version>${commons-beanutils.version}</version>
 			</dependency>
+			<!-- resolve vulnerability CVE-2026-55760 (handlebars is used transitively via wiremock) -->
+			<dependency>
+				<groupId>com.github.jknack</groupId>
+				<artifactId>handlebars</artifactId>
+				<version>${handlebars.version}</version>
+			</dependency>
+			<!-- align commons-text version pulled transitively by handlebars and openapi-generator -->
+			<dependency>
+				<groupId>org.apache.commons</groupId>
+				<artifactId>commons-text</artifactId>
+				<version>${commons-text.version}</version>
+			</dependency>
 			<!--Dependencies with test scope-->
 			<dependency>
 				<groupId>com.sap.cloud.sdk</groupId>