diff --git a/CHANGELOG.md b/CHANGELOG.md
index 18f4095..de45255 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 0.7.2 [unreleased]
+* [dependencies] Updated dependencies to fix vulnerabilities (i.e. CVE-2018-7489)
+* [improvement] Build environment and tests now compatible with Java 10
+
 ## 0.7.1 [2018-03-17]
 * [improvement] Added automatic module name for JPMS compatibility
 * [dependencies] Minor dependency updates
diff --git a/pom.xml b/pom.xml
index cc30146..2b30270 100644
--- a/pom.xml
+++ b/pom.xml
@@ -78,22 +78,22 @@
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpcore</artifactId>
-            <version>4.4.9</version>
+            <version>4.4.10</version>
         </dependency>
         <dependency>
             <groupId>org.apache.httpcomponents</groupId>
             <artifactId>httpclient</artifactId>
-            <version>4.5.5</version>
+            <version>4.5.6</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>2.9.4</version>
+            <version>2.9.6</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.9.4</version>
+            <version>2.9.6</version>
         </dependency>
 
         <dependency>