Vulnerable jar found: jackson-databind-2.6.7.1.jar

[markheger]

Vulnerable jar found: jackson-databind-2.6.7.1.jar

CVEs
CVE-2018-5968
CVE-2017-7525
CVE-2017-17485

[markheger]

suggest to replace the jar with the version 2.9.10.4 in pom.xml

<!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
<dependency>
    <groupId>com.fasterxml.jackson.core</groupId>
    <artifactId>jackson-databind</artifactId>
    <version>2.9.10.4</version>
</dependency>