diff --git a/pom.xml b/pom.xml
index 288bfaff..114a8f60 100644
--- a/pom.xml
+++ b/pom.xml
@@ -91,7 +91,7 @@ alternative support for serializing POJOs as XML and deserializing XML as pojos.
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
       <artifactId>woodstox-core</artifactId>
-      <version>6.6.1</version>
+      <version>6.6.2</version>
       <exclusions>
         <exclusion>
 	  <groupId>javax.xml.stream</groupId>
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index bacd9599..665bc2e6 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -12,6 +12,7 @@ No changes since 2.17
 
 #646: Deserializing fails when using builder classes with `Iterable` Collection setters
  (fix contributed by Bas P)
+* Upgrade Woodstox to 6.6.2 (dependency fixes)
 
 2.17.0 (12-Mar-2024)