diff --git a/CHANGELOG.md b/CHANGELOG.md
index 346bf432e663b..5aa80374ecb26 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -54,6 +54,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Bumps `jempbox` from 1.8.16 to 1.8.17 ([#4550](https://github.com/opensearch-project/OpenSearch/pull/4550))
 - Bumps `hadoop-hdfs` from 3.3.3 to 3.3.4 ([#4644](https://github.com/opensearch-project/OpenSearch/pull/4644))
 - Bumps `jna` from 5.11.0 to 5.12.1 ([#4656](https://github.com/opensearch-project/OpenSearch/pull/4656))
+- Update Jackson Databind to 2.13.4.2 (addressing CVE-2022-42003) ([#4779](https://github.com/opensearch-project/OpenSearch/pull/4779))
 ### Changed
 - Dependency updates (httpcore, mockito, slf4j, httpasyncclient, commons-codec) ([#4308](https://github.com/opensearch-project/OpenSearch/pull/4308))
 - Use RemoteSegmentStoreDirectory instead of RemoteDirectory ([#4240](https://github.com/opensearch-project/OpenSearch/pull/4240))
diff --git a/buildSrc/version.properties b/buildSrc/version.properties
index a779389b3ca82..08784c82a4cc4 100644
--- a/buildSrc/version.properties
+++ b/buildSrc/version.properties
@@ -10,7 +10,7 @@ bundled_jdk = 17.0.4+8
 spatial4j         = 0.7
 jts               = 1.15.0
 jackson           = 2.13.4
-jackson_databind  = 2.13.4
+jackson_databind  = 2.13.4.2
 snakeyaml         = 1.32
 icu4j             = 70.1
 supercsv          = 2.4.0
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1 b/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/distribution/tools/upgrade-cli/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1 b/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/modules/ingest-geoip/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/discovery-ec2/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-azure/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-azure/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-hdfs/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1
new file mode 100644
index 0000000000000..a7782e8aac18d
--- /dev/null
+++ b/plugins/repository-s3/licenses/jackson-databind-2.13.4.2.jar.sha1
@@ -0,0 +1 @@
+325c06bdfeb628cfb80ebaaf1a26cc1eb558a585
\ No newline at end of file
diff --git a/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1 b/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1
deleted file mode 100644
index fcc6491d1f78d..0000000000000
--- a/plugins/repository-s3/licenses/jackson-databind-2.13.4.jar.sha1
+++ /dev/null
@@ -1 +0,0 @@
-98b0edfa8e4084078f10b7b356c300ded4a71491
\ No newline at end of file