diff --git a/.gitmodules b/.gitmodules
index cc53f2979b..65bafc6b72 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -49,16 +49,13 @@
 [submodule "components/json/cJSON"]
 	path = components/json/cJSON
 	url = ../../DaveGamble/cJSON.git
-	sbom-version = 1.7.18
+	sbom-version = 1.7.19
 	sbom-cpe = cpe:2.3:a:cjson_project:cjson:{}:*:*:*:*:*:*:*
 	sbom-cpe = cpe:2.3:a:davegamble:cjson:{}:*:*:*:*:*:*:*
 	sbom-supplier = Person: Dave Gamble
 	sbom-url = https://github.com/DaveGamble/cJSON
 	sbom-description = Ultralightweight JSON parser in ANSI C
-	sbom-hash = 8f2beb57ddad1f94bed899790b00f46df893ccac
-	sbom-cve-exclude-list = CVE-2024-31755 Resolved in v1.7.18
-	sbom-cve-exclude-list = CVE-2023-26819 Resolved in commit a328d65ad490b64da8c87523cbbfe16050ba5bf6
-	sbom-cve-exclude-list = CVE-2023-53154 Resolved in v1.7.18
+	sbom-hash = c859b25da02955fef659d658b8f324b5cde87be3
 
 [submodule "components/mbedtls/mbedtls"]
 	path = components/mbedtls/mbedtls
diff --git a/components/json/cJSON b/components/json/cJSON
index 8f2beb57dd..c859b25da0 160000
--- a/components/json/cJSON
+++ b/components/json/cJSON
@@ -1 +1 @@
-Subproject commit 8f2beb57ddad1f94bed899790b00f46df893ccac
+Subproject commit c859b25da02955fef659d658b8f324b5cde87be3