diff --git a/pom.xml b/pom.xml
index f2d177f..4b8fcfa 100644
--- a/pom.xml
+++ b/pom.xml
@@ -27,6 +27,7 @@
         <kotlin.version>2.1.0</kotlin.version>
         <spring.restdocs.version>3.0.3</spring.restdocs.version>
         <protobuf.version>4.28.2</protobuf.version>
+        <jackson.version>2.18.6</jackson.version>
     </properties>
 
     <dependencyManagement>
@@ -46,6 +47,14 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Jackson BOM: pins jackson-core and related modules to a non-vulnerable version -->
+            <dependency>
+                <groupId>com.fasterxml.jackson</groupId>
+                <artifactId>jackson-bom</artifactId>
+                <version>${jackson.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -54,12 +63,12 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.24.3</version>
+            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.24.3</version>
+            <version>2.25.3</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.logging.log4j</groupId>
@@ -208,7 +217,7 @@
         <dependency>
             <groupId>org.apache.tomcat.embed</groupId>
             <artifactId>tomcat-embed-core</artifactId>
-            <version>11.0.10</version>
+            <version>11.0.14</version>
             <scope>provided</scope>
         </dependency>
         <!-- JUnit -->
@@ -244,7 +253,6 @@
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
             <artifactId>jackson-dataformat-yaml</artifactId>
-            <version>2.15.2</version>
         </dependency>
         <!-- Neo4j Graphql -->
         <dependency>
@@ -289,7 +297,7 @@
         <dependency>
             <groupId>org.opensearch.client</groupId>
             <artifactId>opensearch-rest-client</artifactId>
-            <version>2.11.1</version>
+            <version>2.19.4</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.apache.httpcomponents</groupId>
@@ -337,7 +345,7 @@
         <dependency>
             <groupId>org.opensearch.client</groupId>
             <artifactId>opensearch-rest-high-level-client</artifactId>
-            <version>2.11.1</version>
+            <version>2.19.4</version>
             <exclusions>
                 <exclusion>
                     <groupId>joda-time</groupId>