WINDUP-3841: jackson-databind CVE fix (#914)

* jackson-databind CVE fix

* force jackson versions to 2.13.4

* jackson version properties added

Author: m-brophy

pom.xml

@@ -32,6 +32,8 @@
         <version.wildfly>23.0.2.Final</version.wildfly>
         <wildfly.directory>wildfly-${version.wildfly}</wildfly.directory>
         <version.resteasy>3.15.1.Final</version.resteasy>
+        <version.jackson>2.13.4</version.jackson>
+        <version.jackson.databind>2.13.4.2</version.jackson.databind>
         <version.jboss.javaee>1.0.1.Final</version.jboss.javaee>
 
         <windup.web.scm.connection>scm:git:https://github.com/windup/windup-web.git</windup.web.scm.connection>
@@ -203,6 +205,26 @@
                 <artifactId>resteasy-jackson2-provider</artifactId>
                 <version>${version.resteasy}</version>
             </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-databind</artifactId>
+                <version>${version.jackson.databind}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-core</artifactId>
+                <version>${version.jackson}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.core</groupId>
+                <artifactId>jackson-annotations</artifactId>
+                <version>${version.jackson}</version>
+            </dependency>
+            <dependency>
+                <groupId>com.fasterxml.jackson.jaxrs</groupId>
+                <artifactId>jackson-jaxrs-json-provider</artifactId>
+                <version>${version.jackson}</version>
+            </dependency>
             <dependency>
                 <groupId>org.jboss.arquillian.extension</groupId>
                 <artifactId>arquillian-drone-bom</artifactId>