diff --git a/pom.xml b/pom.xml
index 29a61421b6be..cd3149c4f512 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1224,6 +1224,13 @@
                 <version>3.18.1</version>
             </dependency>
 
+            <dependency>
+                <!-- pinned for transitive dependencies; TODO: move this to airbase -->
+                <groupId>com.fasterxml.jackson.dataformat</groupId>
+                <artifactId>jackson-dataformat-xml</artifactId>
+                <version>${dep.jackson.version}</version>
+            </dependency>
+
             <dependency>
                 <groupId>com.github.ben-manes.caffeine</groupId>
                 <artifactId>caffeine</artifactId>