Add CVE-2020-8840/jackson-databind

Note with 2.10 these issues are mitigated, the fixes are pending as well
for the 2.10 version. Mark this then later on with fixed version
entering unstable with the fix.