[TINKERPOP-2356] Bump to Jackson 2.10.x

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Done
• Affects Version/s: 3.5.0
• Fix Version/s: 3.5.0
• Component/s: io
• Assignee: Stephen Mallette
• Reporter: Stephen Mallette
• Created: 27/Mar/20 14:26
• Updated: 03/Apr/20 16:07
• Resolved: 03/Apr/20 16:07

Description

Going to look at what it takes to bump to Jackson 2.10.x for 3.5.0 since it seems to solve this CVE hell we continue to live in:

https://medium.com/@cowtowncoder/jackson-2-10-features-cd880674d8a2

Issue Links

• relates to: TINKERPOP-2355 Jackson-databind version in Gremlin shaded dependency needs to be increased - introduces vulnerability issues
• links to: GitHub Pull Request #1271