diff --git a/workshop/appd/app/pom.xml b/workshop/appd/app/pom.xml
index 280628bc06..94fca6e377 100644
--- a/workshop/appd/app/pom.xml
+++ b/workshop/appd/app/pom.xml
@@ -20,7 +20,7 @@
     <properties>
         <java.version>17</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
 
     <dependencies>
diff --git a/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle b/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
index 7ab079440d..41299e03bd 100644
--- a/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
+++ b/workshop/demos/otel-discovery-demo/src/loanservice/build.gradle
@@ -13,7 +13,7 @@ java {
 
 ext['tomcat.version'] = '10.1.59'
 ext['logback.version'] = '1.5.35'
-ext['jackson-bom.version'] = '2.21.5'
+ext['jackson-bom.version'] = '2.21.6'
 ext['spring-framework.version'] = '6.2.19'
 ext['spring-kafka.version'] = '3.3.16'
 
@@ -26,6 +26,11 @@ dependencies {
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'
 	implementation 'com.mysql:mysql-connector-j'
 	implementation 'org.springframework.kafka:spring-kafka'
+	constraints {
+		implementation('at.yawk.lz4:lz4-java:1.11.1') {
+			because 'CVE-2026-59949'
+		}
+	}
 }
 
 tasks.named('test') {
diff --git a/workshop/profiling/doorgame/pom.xml b/workshop/profiling/doorgame/pom.xml
index 4045f03e15..fa836d721b 100644
--- a/workshop/profiling/doorgame/pom.xml
+++ b/workshop/profiling/doorgame/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>21</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>
diff --git a/workshop/tagging/creditcheckservice-java-with-tags/pom.xml b/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
index 53064be404..25a43d8aeb 100644
--- a/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
+++ b/workshop/tagging/creditcheckservice-java-with-tags/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>22</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>
diff --git a/workshop/tagging/creditcheckservice-java/pom.xml b/workshop/tagging/creditcheckservice-java/pom.xml
index 53064be404..25a43d8aeb 100644
--- a/workshop/tagging/creditcheckservice-java/pom.xml
+++ b/workshop/tagging/creditcheckservice-java/pom.xml
@@ -16,7 +16,7 @@
     <properties>
         <java.version>22</java.version>
         <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.5</jackson-bom.version>
+        <jackson-bom.version>2.21.6</jackson-bom.version>
     </properties>
     <dependencyManagement>
         <dependencies>