We've released Dropwizard 1.3.14 with jackson-databind 2.9.9.3.
https://twitter.com/fasterxml/status/1158753712883372034
RT @fasterxml@twitter.com
UPDATE: due to clerical error, actual bom to use needs to be `2.9.9.20190807` (first attempt incorrectly referred to earlier micro-patch) #java #json
🐦🔗: https://twitter.com/fasterxml/status/1158753712883372034