Vulnerabilities in dependency: jackson-databind 2.2.3

Nessuno ha ancora preso questa issue.

## Library Version(s)
metosin/compojure-api "1.1.13"

## Problem
Compojure api seem to have an old transitive dependency:
`[com.fasterxml.jackson.core/jackson-databind "2.2.3"]`

`lein nvd check` complains vulnerabilities: CVE-2018-14721, CVE-2018-14720, CVE-2018-14719, CVE-2017-7525, CVE-2018-19360, CVE-20...

Dependency tree:
```
[metosin/compojure-api "1.1.13"]
[cheshire "5.9.0"]
[com.fasterxml.jackson.core/jackson-core "2.9.9"]
[com.fasterxml.jackson.dataformat/jackson-dataformat-cbor "2.9.9"]
[com.fasterxml.jackson.dataformat/jackson-dataformat-smile "2.9.9"]
[tigris "0.1.1"]
[compojure "1.6.1"]
[clout "2.2.1"]
[medley "1.0.0"]
[frankiesardo/linked "1.3.0"]
[metosin/ring-http-response "0.9.1"]
[metosin/ring-swagger "0.26.2"]
[metosin/schema-tools "0.11.0"]
[metosin/scjsv "0.5.0"]
[com.github.java-json-tools/json-schema-validator "2.2.10"]
[com.github.java-json-tools/json-schema-core "1.2.10"]
[com.github.fge/uri-template "0.9"]
[com.github.java-json-tools/jackson-coreutils "1.9"]
[com.fasterxml.jackson.core/jackson-databind "2.2.3"]
[com.fasterxml.jackson.core/jackson-annotations "2.2.3"]
[com.github.fge/msg-simple "1.1"]
[com.github.fge/btf "1.2"]
[org.mozilla/rhino "1.7.7.1"]
[com.googlecode.libphonenumber/libphonenumber "8.0.0"]
[javax.mail/mailapi "1.4.3"]
[net.sf.jopt-simple/jopt-simple "5.0.3"]
```

Inizia con l’albero delle dipendenze dell’issue ed esegui `lein nvd check` su Compojure API 1.1.13 per confermare il percorso vulnerabile di jackson-databind 2.2.3. Traccia la dipendenza transitiva attraverso scjsv e jackson-coreutils, quindi verifica che la dipendenza risolta non segnali più i CVE elencati senza interrompere l’insieme di dipendenze esistente.

Scritto dal modello di indicizzazione a partire dal testo della issue.