Root has patched CVE-2019-17531 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.
{
"distro_version": "",
"distro": "maven",
"severity": "CRITICAL",
"source": "Root"
}