Dependency review failure: jackson xml

### Bug Description

Hello, we're seeing a dependency review failure due to the inclusion of `com.fasterxml.jackson.core:jackson-core:2.20.1`

The GHSA flagged is [GHSA-72hv-8253-57qq jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition](https://github.com/advisories/GHSA-72hv-8253-57qq).

The vulnerability concerns a malicious input causing a DoS, I doubt it is relevant to CycloneDx but is still flagged.

Any chance of updating to the fixed version 2.21.1?

### Self-contained Reproducer Project

N/A

### Expected Behavior

N/A

### Gradle build scan URL (optional)

_No response_

### OS

_No response_

### Gradle version

_No response_

### CycloneDX Plugin version

3.1.1

### Additional Context

_No response_

### Contribution

- [ ] I am willing to provide a fix
- [x] I will wait until somebody else fixes it

No source file is named. Start by searching the Gradle build files and dependency declarations for com.fasterxml.jackson.core:jackson-core, then check how the CycloneDX Gradle plugin resolves that dependency. Update it to the requested fixed version and run the project's Gradle checks or dependency review to confirm the flagged advisory is gone.

Written by the indexing model from the issue text.