diff --git a/pom.xml b/pom.xml
index 2d163c6..0e9cb6a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -66,7 +66,7 @@ org.xml.sax, org.xml.sax.ext, org.xml.sax.helpers</osgi.import>
     <dependency>
       <groupId>org.codehaus.woodstox</groupId>
       <artifactId>stax2-api</artifactId>
-      <version>4.2</version>
+      <version>4.2.2</version>
     </dependency>
     <!--
      | Test dependencies
diff --git a/release-notes/VERSION b/release-notes/VERSION
index fa34b8f..028964a 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -8,6 +8,7 @@ Project: aalto-xml
 
 #78: Async parsing turns &quot; inside element content into apostrophe
  (reported by Jamie P)
+#90: Update stax2-api dep to 4.2.2 (from 4.2)
 
 1.3.1 (14-Jan-2022)