diff --git a/gxazureserverless/pom.xml b/gxazureserverless/pom.xml
index a0bd43ab9..17f41d4c5 100644
--- a/gxazureserverless/pom.xml
+++ b/gxazureserverless/pom.xml
@@ -44,6 +44,12 @@
             <artifactId>cloudevents-json-jackson</artifactId>
             <version>4.0.1</version>
         </dependency>
+        <!-- overwrite from io.cloudevents due to transitive CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
 
         <dependency>
             <groupId>com.azure</groupId>
diff --git a/pom.xml b/pom.xml
index ac5559817..b5525c8e4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -22,7 +22,7 @@
 		<jersey.jakarta.version>3.0.17</jersey.jakarta.version>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<poi.version>5.4.1</poi.version>
-		<jackson.version>2.16.2</jackson.version>
+		<jackson.version>2.18.6</jackson.version>
 		<junit.version>4.13.2</junit.version>
 		<software.awssdk.version>2.40.8</software.awssdk.version>
 		<software.azure.cosmos.version>4.74.0</software.azure.cosmos.version>
diff --git a/wrapperjakarta/pom.xml b/wrapperjakarta/pom.xml
index f367640ed..9b382f307 100644
--- a/wrapperjakarta/pom.xml
+++ b/wrapperjakarta/pom.xml
@@ -76,19 +76,19 @@
         <dependency>
         	<groupId>com.fasterxml.jackson.core</groupId>
         	<artifactId>jackson-core</artifactId>
-        	<version>2.15.2</version>
+        	<version>${jackson.version}</version>
         </dependency>
 
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-annotations</artifactId>
-            <version>2.15.2</version>
+            <version>${jackson.version}</version>
         </dependency>
 
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.15.2</version>
+            <version>${jackson.version}</version>
         </dependency>
 
         <dependency>