[java-sig-commits] [Bug 1816330] CVE-2020-8840 jackson-databind: Lacks certain xbean-reflect/JNDI blocking