diff --git a/CHANGES.md b/CHANGES.md
index 5f3b5a792d..c4a5c04b20 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -18,6 +18,7 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `jackson-dataformat-yaml` version `2.14.1` -> `2.20.1`. ([#3045](https://github.com/diffplug/spotless/pull/3045))
 - Bump default `ktfmt` version to latest `0.63` -> `0.64`. ([2988](https://github.com/diffplug/spotless/pull/2988))
 - Bump default `cleanthat` version `2.25` -> `2.26`. ([#2882](https://github.com/diffplug/spotless/pull/2882))
+- Bump default `jackson` version `2.20.1` -> `2.22.2`. ([#2819](https://github.com/diffplug/spotless/pull/2819))
 
 ### Fixed
 - `VersionCatalogStep` preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. ([#3042](https://github.com/diffplug/spotless/pull/3042))
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 465dcd795f..f74d05c9b3 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -2,7 +2,7 @@
 jdk-release = "17"
 durian = "1.2.0"
 selfie = "3.1.1"
-jackson = "2.20.1"
+jackson = "2.22.2"
 maven-api = "3.0"
 ktlint = "1.8.0"
 javaparser = "3.27.1"
diff --git a/plugin-gradle/CHANGES.md b/plugin-gradle/CHANGES.md
index b2b58f9132..5c5977bbf9 100644
--- a/plugin-gradle/CHANGES.md
+++ b/plugin-gradle/CHANGES.md
@@ -10,6 +10,7 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `jackson-dataformat-yaml` version `2.14.1` -> `2.20.1`. ([#3045](https://github.com/diffplug/spotless/pull/3045))
 - Bump default `ktfmt` version to latest `0.63` -> `0.64`. ([2988](https://github.com/diffplug/spotless/pull/2988))
 - Bump default `cleanthat` version `2.25` -> `2.26`. ([#2882](https://github.com/diffplug/spotless/pull/2882))
+- Bump default `jackson` version `2.20.1` -> `2.22.2`. ([#2819](https://github.com/diffplug/spotless/pull/2819))
 
 ### Fixed
 - `versionCatalog()` preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. ([#3042](https://github.com/diffplug/spotless/pull/3042))
diff --git a/plugin-maven/CHANGES.md b/plugin-maven/CHANGES.md
index b8dba96b1e..ae7fd68663 100644
--- a/plugin-maven/CHANGES.md
+++ b/plugin-maven/CHANGES.md
@@ -10,6 +10,7 @@ We adhere to the [keepachangelog](https://keepachangelog.com/en/1.0.0/) format (
 - Bump default `jackson-dataformat-yaml` version `2.14.1` -> `2.20.1`. ([#3045](https://github.com/diffplug/spotless/pull/3045))
 - Bump default `ktfmt` version to latest `0.63` -> `0.64`. ([2988](https://github.com/diffplug/spotless/pull/2988))
 - Bump default `cleanthat` version `2.25` -> `2.26`. ([#2882](https://github.com/diffplug/spotless/pull/2882))
+- Bump default `jackson` version `2.20.1` -> `2.22.2`. ([#2819](https://github.com/diffplug/spotless/pull/2819))
 
 ### Fixed
 - `<versionCatalog>` preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. ([#3042](https://github.com/diffplug/spotless/pull/3042))