My organization is blocking application releases that include Jackson Databind 2.9.8, due to vulnerability concerns. Are there any plans to include an upgrade to Jackson Databind and related components in Play 2.7.4? That would be great. If so, when will Play 2.7.4 be released?
I’m aware that a newer version of Jackson Databind will be supported in Play 2.8, but that release does not seem to be imminent.