diff --git a/gradle.properties b/gradle.properties
index 2d44c0c8..d4ef248e 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -19,8 +19,13 @@ hibernateVersion=5.6.15.Final
 httpclientVersion=3.1
 httpcomponentsVersion=4.5.14
 hsqldbVersion=2.7.4
+# jackson-annotations is versioned independently of core/databind: as of
+# Jackson 2.20 FasterXML stopped cutting patch releases of jackson-annotations
+# (its API is stable), so it only ships as 2.22 while core/databind get 2.22.x
+# patches. Keep this on the latest existing annotations release.
+jacksonAnnotationsVersion=2.22
 jacksonDatabindVersion=2.22.2
-jacksonVersion=2.22
+jacksonVersion=2.22.2
 janinoVersion=3.1.12
 jasyptVersion=1.9.3
 # Match the jjwt version pulled in transitively by uPortal-soffit-core.
diff --git a/notification-portlet-api/build.gradle b/notification-portlet-api/build.gradle
index 84ab1636..94afa435 100644
--- a/notification-portlet-api/build.gradle
+++ b/notification-portlet-api/build.gradle
@@ -1,7 +1,7 @@
 description = "Simple data model for Notifications used in integrations"
 
 dependencies {
-    compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
+    compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonAnnotationsVersion}"
     compile "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
     compile "com.fasterxml.jackson.core:jackson-databind:${jacksonDatabindVersion}"
     compile "commons-lang:commons-lang:${commonsLangVersion}"