[java-sig-commits] [Bug 1758191] CVE-2019-16943 jackson-databind: Serialization gadgets in classes of the p6spy package