[java-sig-commits] [Bug 1758171] CVE-2019-14892 jackson-databind: Serialization gadgets in classes of the commons-configuration package