Are there any plans to update the dependencies from jackson-databind? Seems the latest doesn't have the CVE's https://mvnrepository.com/artifact/com.graphql-java/graphql-java-servlet/6.1.3