diff --git a/CHANGELOG.md b/CHANGELOG.md
index d89e112..2f6fe70 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,12 @@ This project follows **Semantic Versioning (SemVer)** ([semver.org](https://semv
 
 ---
 
+## [1.2.2] - 2026-07-24
+
+### Security
+
+- Bumped `org.postgresql:postgresql` from 42.7.11 to 42.7.12 to resolve CVE-2026-54291.
+
 ## [1.2.1] - 2026-07-16
 
 ### Changed
diff --git a/pom.xml b/pom.xml
index a296f32..bc3db5a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,7 @@
   </parent>
   <groupId>uk.gov.dbt.ndtp.ia.management.node</groupId>
   <artifactId>management-node</artifactId>
-  <version>1.2.0</version>
+  <version>1.2.2</version>
   <packaging>jar</packaging>
   <name>management-node</name>
   <description>Provides Management capabilities over IA Node Net</description>
@@ -46,7 +46,7 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <spring-cloud.version>2025.0.0</spring-cloud.version>
     <jackson-bom.version>2.21.4</jackson-bom.version>
-    <postgresql.version>42.7.11</postgresql.version>
+    <postgresql.version>42.7.12</postgresql.version>
     <flyway.version>11.10.4</flyway.version>
     <plugin.spotless>2.46.1</plugin.spotless>
     <plugin.spotless.gson>2.11.0</plugin.spotless.gson>