diff --git a/build.gradle.kts b/build.gradle.kts
index e3afa0e..0414a9a 100644
--- a/build.gradle.kts
+++ b/build.gradle.kts
@@ -38,7 +38,7 @@ dependencies {
 
     // Override Spring Boot 4.1.1's managed Jackson 3.1.5 to patch
     // CVE-2026-89407/-89425/-68497/-91776/-91777 (fixed in 3.1.7).
-    implementation("tools.jackson.core:jackson-core:3.1.8")
+    implementation("tools.jackson.core:jackson-core:3.3.0")
     implementation("tools.jackson.core:jackson-databind:3.2.4")
   }