diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 0ba8f1f38..2fda4a3b9 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -48,7 +48,7 @@
 		<service-binding.version>0.21.0</service-binding.version>
 		<!-- HTTP stuff -->
 		<httpcore.version>4.4.16</httpcore.version>
-		<httpcore5.version>5.3.4</httpcore5.version>
+		<httpcore5.version>5.3.5</httpcore5.version>
 		<httpclient5.version>5.5</httpclient5.version>
 		<httpcomponents-client.version>4.5.14</httpcomponents-client.version>
 		<jakarta-servlet.version>6.1.0</jakarta-servlet.version>
@@ -77,7 +77,7 @@
 		<resilience4j.version>2.3.0</resilience4j.version>
 		<!-- JSON & XML stuff -->
 		<gson.version>2.13.1</gson.version>
-		<jackson.version>2.19.2</jackson.version>
+		<jackson.version>2.20</jackson.version>
 		<owasp-json-sanitizer.version>1.2.3</owasp-json-sanitizer.version>
 		<!-- end of essential versions -->
 	</properties>
diff --git a/pom.xml b/pom.xml
index be6c10858..25ed3adf7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
 		<codeAnalysisExclusions>**/testclasses/**</codeAnalysisExclusions>
 		<!--  Non-essential dependencies  -->
 		<jco-api.version>4.87.9</jco-api.version>
-		<jackson.version>2.19.2</jackson.version>
+		<jackson.version>2.20</jackson.version>
 		<!--  WordUtils used twice in OData generator  -->
 		<json.version>20250517</json.version>
 		<!--  XML used once in SOAP payload deserialisation  -->