Based on the PR #431 to address vulnerabilities from jackson.core databind.
Activity