diff --git a/Changes b/Changes
index d479022..8591821 100644
--- a/Changes
+++ b/Changes
@@ -1,3 +1,7 @@
+0.2.8 2022-10-05
+    - Upgrade dependencies following dependabot.
+      This fixes CVE-2022-42003! Please update!
+
 0.2.7 2021-10-13
     - Upgrade dependency on Junit following dependabot.
     - Upgrade dependency on Jackson following dependabot.
diff --git a/pom.xml b/pom.xml
index 777034c..bc84a5f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
   <groupId>de.ids_mannheim.korap</groupId>
   <artifactId>KalamarExportPlugin</artifactId>
   <packaging>jar</packaging>
-  <version>0.2.7</version>
+  <version>0.2.8</version>
   <name>KalamarExportPlugin</name>
   <url>https://korap.ids-mannheim.de/</url>
   
@@ -33,7 +33,7 @@
     <dependency>
       <groupId>com.fasterxml.jackson.core</groupId>
       <artifactId>jackson-databind</artifactId>
-      <version>2.13.4</version>
+      <version>2.14.0-rc1</version>
     </dependency>
 
     <!-- jetty -->