diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 658caa58..fb549d37 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -33,7 +33,7 @@ object Dependencies {
   lazy val guava = "com.google.guava" % "guava" % "33.0.0-jre"
   // XXX This is necessary for Spark version consistency
   lazy val jacksonDatabind =
-    "com.fasterxml.jackson.core" % "jackson-databind" % "2.15.2"
+    "com.fasterxml.jackson.core" % "jackson-databind" % "2.15.4"
   // XXX Version bundled with Spark is vulnerable to CVE-2022-3171
   lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.4"
   // XXX Bundled version is vulnerable to CVE-2023-34455