Downgrade to Jackson 2.9.10 (including CVE fixes) waithing XBean fix.
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<cxf.version>3.3.2</cxf.version>
- <version.jackson.core>2.10.0</version.jackson.core>
- <version.jackson.jaxb>2.10.0</version.jackson.jaxb>
+ <version.jackson.core>2.9.10</version.jackson.core>
+ <version.jackson.databind>2.9.10.1</version.jackson.databind>
+ <version.jackson.jaxb>2.9.10</version.jackson.jaxb>
<version.karaf>4.2.7</version.karaf>
<version.karaf.cellar>4.1.3</version.karaf.cellar>
<version.pax.exam>4.13.1</version.pax.exam>
