Another Security Vulnerabilities in Fasterxml Jackson-databind, please update to latest version 2.9.5

[psytester]

After Update is before update.
There is another CVE out about the possibility of RemoteCodeExecution in JSON parsing due to Java deserialization flaw

https://www.cvedetails.com/cve/CVE-2018-7489/

Please update to latest version 2.9.5 of the package to avoid any man in the middle attacks, where the JSON repsonse might be modified to inject the maliciously crafted data into the Server resonse

[mmallis87]

Thank you @psytester for reporting this. The fix should be deployed soon in version 2.5.1.