The link below points to the Risk Matrix related to jackson-databind in Oracle NoSQL Database releases prior to 19.3.12.
https://www.oracle.com/technetwork/security-a