diff --git a/pom.xml b/pom.xml
index 423f3962fbb0..4a22db6a017a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -89,7 +89,7 @@
         <jetty.version>9.4.10.v20180503</jetty.version>
         <jersey.version>1.19.3</jersey.version>
         <!-- jackson 2.7.x causes injection error and 2.8.x can't be used because avatica is using 2.6.3 -->
-        <jackson.version>2.6.7</jackson.version>
+        <jackson.version>2.12.7.1</jackson.version>
         <log4j.version>2.5</log4j.version>
         <!-- HttpClient has not yet been ported to Netty 4.x -->
         <netty3.version>3.10.6.Final</netty3.version>