diff --git a/pom.xml b/pom.xml
index 00e8451e08..cd3b88c1b7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -144,6 +144,7 @@
       <groupId>net.bytebuddy</groupId>
       <artifactId>byte-buddy</artifactId>
       <version>1.14.9</version>
+      <scope>test</scope>
     </dependency>
   </dependencies>
 
diff --git a/release-notes/CREDITS-2.x b/release-notes/CREDITS-2.x
index 37c8ef22a6..3371e8dcfe 100644
--- a/release-notes/CREDITS-2.x
+++ b/release-notes/CREDITS-2.x
@@ -1761,3 +1761,7 @@ Kyrylo Merzlikin (kirmerzlikin@github)
  * Contributed fix for #2543: Introspection includes delegating ctor's
    only parameter as a property in `BeanDescription`
   (2.17.0)
+
+Miguel Mendes Ruiz (migmruiz@github)
+ * Reported #4428: `ByteBuddy` scope went beyond `test` in version 2.17.0
+  (2.17.1)
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index a51fa71a38..cd5633f8ee 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -4,6 +4,12 @@ Project: jackson-databind
 === Releases === 
 ------------------------------------------------------------------------
 
+2.17.1 (not yet released)
+
+#4428: `ByteBuddy` scope went beyond `test` in version 2.17.0
+ (reported by Miguel M-R)
+ (fix contributed by Joo-Hyuk K)
+
 2.17.0 (12-Mar-2024)
 
 #437: Support throwing `MismatchedInputException` when deserializing