diff --git a/CHANGELOG.md b/CHANGELOG.md
index 943705c4f2c6d..8c7791fab3e1d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -47,6 +47,9 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - BWC version 1.3.6 ([#4452](https://github.com/opensearch-project/OpenSearch/pull/4452))
 - 2.3.0 release notes ([#4457](https://github.com/opensearch-project/OpenSearch/pull/4457))
 
+### Dependencies
+- Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) ([#4781](https://github.com/opensearch-project/OpenSearch/pull/4781))
+
 ### Changed
 
 ### Deprecated
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index 4b490b3ca9c6d..fdc6410f2a08d 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -10,7 +10,7 @@ bundled_jdk = 17.0.4+8
 spatial4j         = 0.7
 jts               = 1.15.0
 jackson           = 2.13.4
-jackson_databind  = 2.13.4
+jackson_databind  = 2.13.4.2
 snakeyaml         = 1.32
 icu4j             = 70.1
 supercsv          = 2.4.0
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file