[Bug]: jackson-databind version upgrade to remediate security vulnerabilities #9528 Fix

[shanjare2002]

I changed the Jackon version from 2.8.8 -> 2.8.9

[eddumelendez]

Hi, how moving to patch version is going to fix security vulnerabilities? Can you elaborate?

[shanjare2002]

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This is critical vulnerability, and was patched in jackson 2.8.9 version and up. Jackson is only used in the core
The only change was in the above mentioned modules as these are the only ones that jackson.

[shanjare2002]

Can this merge request be checked it has been 3 months.

[eddumelendez]

Is this affecting from the test perspective? The plan is to update dependencies in the next months. Thanks for raising the PR.