Jackson has some security vulnerability that can only be exploited in a server environment; not relevant here whatsoever, but might as well update.
One for the library (same as before), the other for the executable part.
