diff --git a/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/TestRestObjectMapper.java b/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/TestRestObjectMapper.java
index 62c21f71d9..d2f17f5fef 100644
--- a/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/TestRestObjectMapper.java
+++ b/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/TestRestObjectMapper.java
@@ -21,6 +21,9 @@
 import java.io.InputStream;
 import java.util.Date;
 
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.core.exc.StreamConstraintsException;
+import com.google.common.base.Strings;
 import org.apache.servicecomb.foundation.common.utils.RestObjectMapper;
 import org.junit.jupiter.api.Assertions;
 
@@ -90,4 +93,18 @@ public void testJsonObjectWork() {
       Assertions.fail();
     }
   }
+
+  @Test
+  public void testReadValue() {
+    String content = "{\"desc\":" + Strings.repeat("9", 1001) + "}";
+    try {
+      RestObjectMapperFactory.getRestObjectMapper().readValue(content, PojoModel.class);
+      Assertions.fail();
+    } catch (StreamConstraintsException e) {
+      // right place, nothing to do.
+    } catch (JsonProcessingException ex) {
+      Assertions.fail();
+    }
+  }
+
 }
diff --git a/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/fix/TestDoSFix.java b/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/fix/TestDoSFix.java
index ae8abc8a6e..db0f04e863 100644
--- a/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/fix/TestDoSFix.java
+++ b/common/common-rest/src/test/java/org/apache/servicecomb/common/rest/codec/fix/TestDoSFix.java
@@ -35,7 +35,7 @@
 public class TestDoSFix {
   static final ObjectMapper mapper = new RestObjectMapper();
 
-  static final String invalidNum = Strings.repeat("9", 100_0000);
+  static final String invalidNum = Strings.repeat("9", 1000);
 
   static final String invalidStr = "\"" + invalidNum + "\"";
 
diff --git a/dependencies/default/pom.xml b/dependencies/default/pom.xml
index b6908dcf60..56c2cc2f7d 100644
--- a/dependencies/default/pom.xml
+++ b/dependencies/default/pom.xml
@@ -59,7 +59,7 @@
     <hibernate-validator.version>6.2.5.Final</hibernate-validator.version>
     <httpcomponents.version>4.5.14</httpcomponents.version>
     <hystrix.version>1.5.18</hystrix.version>
-    <jackson.version>2.14.2</jackson.version>
+    <jackson.version>2.15.0</jackson.version>
     <java-websocket.version>1.5.3</java-websocket.version>
     <javax-annotation.version>1.3.2</javax-annotation.version>
     <javax-inject.version>1</javax-inject.version>