mbfarmerio
commented
3 years ago - version used had a verified vericode vulnerability
- jackson databind was recommended as the replacement
- https://community.veracode.com/s/question/0D52T00004rDeRkSAK/sca-found-vulnerabilities-on-the-following-component-jacksonmapperasl192jarlooking-at-the-cves-they-are-related-to-jacksondatabind-component-instead-jacksonmapper-why-is-that