diff --git a/hbase-examples/pom.xml b/hbase-examples/pom.xml
index 06468980b22c..c39e977cba6a 100644
--- a/hbase-examples/pom.xml
+++ b/hbase-examples/pom.xml
@@ -30,10 +30,11 @@
   <name>Apache HBase - Examples</name>
   <description>Examples of HBase usage</description>
   <properties>
-    <!--Version of protobuf that hbase uses internally (we shade our pb)
-         Must match what is out in hbase-thirdparty include.
+    <!--
+      Version of protobuf that hbase uses internally (we shade our pb) Must match what is out
+      in hbase-thirdparty include.
     -->
-    <internal.protobuf.version>4.27.3</internal.protobuf.version>
+    <internal.protobuf.version>4.28.2</internal.protobuf.version>
   </properties>
   <dependencies>
     <dependency>
diff --git a/hbase-protocol-shaded/pom.xml b/hbase-protocol-shaded/pom.xml
index ce24ad670fc4..fc80e7d41f57 100644
--- a/hbase-protocol-shaded/pom.xml
+++ b/hbase-protocol-shaded/pom.xml
@@ -31,10 +31,11 @@
   <description>Shaded protobuf protocol classes used by HBase internally.</description>
   <properties>
     <maven.javadoc.skip>true</maven.javadoc.skip>
-    <!--Version of protobuf that hbase uses internally (we shade our pb)
-         Must match what is out in hbase-thirdparty include.
+    <!--
+      Version of protobuf that hbase uses internally (we shade our pb) Must match what is out
+      in hbase-thirdparty include.
     -->
-    <internal.protobuf.version>4.27.3</internal.protobuf.version>
+    <internal.protobuf.version>4.28.2</internal.protobuf.version>
   </properties>
   <dependencies>
     <!--BE CAREFUL! Any dependency added here needs to be
diff --git a/pom.xml b/pom.xml
index 1a26ba884b43..71b89cc3e163 100644
--- a/pom.xml
+++ b/pom.xml
@@ -907,7 +907,7 @@
         databind] must be kept in sync with the version of jackson-jaxrs-json-provider shipped in
         hbase-thirdparty.
     -->
-    <hbase-thirdparty.version>4.1.8</hbase-thirdparty.version>
+    <hbase-thirdparty.version>4.1.9</hbase-thirdparty.version>
     <!-- Coverage properties -->
     <jacoco.version>0.8.8</jacoco.version>
     <jacocoArgLine/>