Vulnerabilities in dependency: jackson-databind 2.2.3

## Library Version(s)
metosin/compojure-api "1.1.13"

## Problem
Compojure api seem to have an old transitive dependency:
`[com.fasterxml.jackson.core/jackson-databind "2.2.3"]`

`lein nvd check` complains vulnerabilities: CVE-2018-14721, CVE-2018-14720, CVE-2018-14719, CVE-2017-7525, CVE-2018-19360, CVE-20...

Dependency tree:
```
[metosin/compojure-api "1.1.13"]
[cheshire "5.9.0"]
[com.fasterxml.jackson.core/jackson-core "2.9.9"]
[com.fasterxml.jackson.dataformat/jackson-dataformat-cbor "2.9.9"]
[com.fasterxml.jackson.dataformat/jackson-dataformat-smile "2.9.9"]
[tigris "0.1.1"]
[compojure "1.6.1"]
[clout "2.2.1"]
[medley "1.0.0"]
[frankiesardo/linked "1.3.0"]
[metosin/ring-http-response "0.9.1"]
[metosin/ring-swagger "0.26.2"]
[metosin/schema-tools "0.11.0"]
[metosin/scjsv "0.5.0"]
[com.github.java-json-tools/json-schema-validator "2.2.10"]
[com.github.java-json-tools/json-schema-core "1.2.10"]
[com.github.fge/uri-template "0.9"]
[com.github.java-json-tools/jackson-coreutils "1.9"]
[com.fasterxml.jackson.core/jackson-databind "2.2.3"]
[com.fasterxml.jackson.core/jackson-annotations "2.2.3"]
[com.github.fge/msg-simple "1.1"]
[com.github.fge/btf "1.2"]
[org.mozilla/rhino "1.7.7.1"]
[com.googlecode.libphonenumber/libphonenumber "8.0.0"]
[javax.mail/mailapi "1.4.3"]
[net.sf.jopt-simple/jopt-simple "5.0.3"]
```

Start with the dependency tree in the issue and run `lein nvd check` against Compojure API 1.1.13 to confirm the vulnerable jackson-databind 2.2.3 path. Trace the transitive dependency through scjsv and jackson-coreutils, then verify that the resolved dependency no longer reports the listed CVEs without breaking the existing dependency set.

Written by the indexing model from the issue text.