We've released Dropwizard 1.3.14 with jackson-databind 2.9.9.3.
https://twitter.com/fasterxml/status/1158753712883372034

RT @fasterxml@twitter.com

UPDATE: due to clerical error, actual bom to use needs to be `2.9.9.20190807` (first attempt incorrectly referred to earlier micro-patch) #java #json

🐦🔗: https://twitter.com/fasterxml/status/1158753712883372034