diff --git a/todolist-web-common/pom.xml b/todolist-web-common/pom.xml
index e07dd3af25..2b85167928 100644
--- a/todolist-web-common/pom.xml
+++ b/todolist-web-common/pom.xml
@@ -17,6 +17,22 @@
     </properties>
 
     <dependencies>
+        <!-- jackson vulnerable conditions -->
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-core</artifactId>
+            <version>2.6.5</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+            <version>2.6.5</version>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-annotations</artifactId>
+            <version>2.6.5</version>
+        </dependency>
 
         <!-- todolist core module-->
         <dependency>