Problem We're on a version of jackson from October 2016, and it has a [CVE][0] against it. Furthermore, there are bugfixes and feature improvements in new jackson, which we would like to use. Solution Upgrade to the latest and greatest version of jackson. [0]: https://nvd.nist.gov/vuln/detail/CVE-2017-7525 JIRA Issues: CSL-6599 Differential Revision: https://phabricator.twitter.biz/D204133