Red Hat Security Advisory 2020-4312-01 - The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API. Issues addressed include an XML injection vulnerability.
18bf5956329cfe1c1947719c6bc15e45f7f134d6bbf4ce1f9f266fd71956393c