[java-sig-commits] [Bug 1758187] New: CVE-2019-16942 jackson-databind: Serialization gadgets in classes of the commons-dbcp package