As per title, `2.9.9.1` of `jackson-databind` was released (ahead of full `2.9.10` that will take longer), and contains fixes to 2 CVEs (of polymorphic deser variety, see https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062).
This is to be used with version 2.9.9 of other components. -+ Tatu +- -- You received this message because you are subscribed to the Google Groups "jackson-user" group. To unsubscribe from this group and stop receiving emails from it, send an email to jackson-user+unsubscr...@googlegroups.com. To post to this group, send email to jackson-user@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jackson-user/CAL4a10jjG2yetYuT_1vZyaz9Wzbj7cUB7-nvmk_i4%3D0m9kwiuw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
