diff --git a/bytebuffer-collections/pom.xml b/bytebuffer-collections/pom.xml
old mode 100755
new mode 100644
index cf658a5c3d4a..dc3c89d4e83d
--- a/bytebuffer-collections/pom.xml
+++ b/bytebuffer-collections/pom.xml
@@ -56,7 +56,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>2.4.6</version>
+      <version>2.12.7.1</version>
     </dependency>
     <dependency>
       <groupId>org.roaringbitmap</groupId>
diff --git a/pom.xml b/pom.xml
index b9748ab36d39..00e8868d0ce8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -68,7 +68,7 @@
         <jetty.version>9.3.19.v20170502</jetty.version>
         <jersey.version>1.19.3</jersey.version>
         <!-- Watch out for Hadoop compatibility when updating to >= 2.5; see https://github.com/druid-io/druid/pull/1669 -->
-        <jackson.version>2.4.6</jackson.version>
+        <jackson.version>2.12.7.1</jackson.version>
         <log4j.version>2.5</log4j.version>
         <netty.version>4.1.11.Final</netty.version>
         <slf4j.version>1.7.12</slf4j.version>