diff --git a/gxcloudstorage-googlecloudstorage/pom.xml b/gxcloudstorage-googlecloudstorage/pom.xml
index 671242cd8..884759176 100644
--- a/gxcloudstorage-googlecloudstorage/pom.xml
+++ b/gxcloudstorage-googlecloudstorage/pom.xml
@@ -79,5 +79,11 @@
             <artifactId>grpc-netty-shaded</artifactId>
             <version>1.75.0</version>
         </dependency>
+        <!-- overwrite jackson-core from google-cloud-storage because of CVEs-->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
 	</dependencies>
 </project>
\ No newline at end of file
diff --git a/gxcosmosdb/pom.xml b/gxcosmosdb/pom.xml
index 3f8a26ff4..33b9b4d3c 100644
--- a/gxcosmosdb/pom.xml
+++ b/gxcosmosdb/pom.xml
@@ -27,6 +27,12 @@
             <groupId>com.azure</groupId>
             <artifactId>azure-cosmos</artifactId>
         </dependency>
+        <!-- overwrite from azure-cosmos due to transitive CVEs -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>${jackson.version}</version>
+        </dependency>
 
         <!-- overwrite from azure-cosmos due to transitive CVEs -->
         <dependency>