diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0c6bf7da..810d3311 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.0.4
+
+### Chore & Maintenance
+
+- Update `jackson-databind`, `jackson-core`, and `jackson-annotations` dependencies to the 2.21 LTS line due to vulnerability
+
 ## 1.0.3
 
 ### Chore & Maintenance
diff --git a/pom.xml b/pom.xml
index 87300363..e6c98935 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
   <artifactId>lf-repository-api-client-v2</artifactId>
   <packaging>jar</packaging>
   <name>Laserfiche Repository API Client V2</name>
-  <version>1.0.0</version>
+  <version>1.0.4</version>
   <url>https://github.com/Laserfiche/lf-repository-api-client-java</url>
   <description>The Java Laserfiche Repository API Client library for accessing the v2 Laserfiche Repository APIs.</description>
   <scm>
@@ -240,7 +240,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-annotations</artifactId>
-      <version>${jackson-version}</version>
+      <version>${jackson-annotations-version}</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
@@ -309,7 +309,9 @@
     <maven.compiler.target>${java.version}</maven.compiler.target>
     <gson-fire-version>1.8.0</gson-fire-version>
     <swagger-core-version>2.0.0</swagger-core-version>
-    <jackson-version>2.18.2</jackson-version>
+    <!-- [AI-Generated] by claude-sonnet-5 v0.001 on 2026-08-21: bumped Jackson to 2.21 LTS line, fixes CVE-2026-59889 -->
+    <jackson-version>2.21.6</jackson-version>
+    <jackson-annotations-version>2.21</jackson-annotations-version>
     <retrofit-version>2.9.0</retrofit-version>
     <threetenbp-version>1.3.5</threetenbp-version>
     <oltu-version>1.0.2</oltu-version>