Multiple security vulnerabilities in jackson-databind in SDK 2.9.24

[josephhanceslm]

Expected Behavior

The jackson-databind library version should be updated to at least 2.9.10

Current Behavior

The current version in SDK 2.9.24 is vulnerable to:

CVE-2019-17267
CVE-2019-14540
CVE-2019-14439

All are categorized as "high" severity.

Possible Solution

Upgrade to use jackson-databind 2.9.10

[dagnir]

Hi @josephhanceslm We have a fix for it and it should be released in the next update #1480

[dagnir]

Fixed by #1480, released as 2.10.0.

[josephhanceslm]

+1