Upgrade jackson-databind to fix security