Environment (Required on creation): MODEL and PROD

Description (Required on creation; please attach any relevant screenshots, stacktraces, log files, etc. to the ticket): 

Twistlock scan error from camunda-spin-dataformat-all  blocks deployment of our application to MODEL and PROD environments. We have the below mentioned Camunda JARS (all updated to the highest versions available) in our application.

We have decompiled all the jars related to camunda and found jackson-databind from camunda-spin-dataformat-all artifact.(Screenshot attached)

Steps to reproduce (Required on creation):

Execute Twistlock scan on a Springboot-Camunda project with the above mentioned JAR files.

Observed Behavior (Required on creation):

Getting the below mentioned Twistlock scan error(CVE-2020-36518) from com.fasterxml.jackson.core_jackson-databindincluded in camunda-spin-dataformat-all artifact.

Expected behavior (Required on creation):

No Twistlock error should be thrown

Root Cause (Required on prioritization):

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

Solution Ideas (Optional):

Release upgraded version of camunda-spin-dataformat-all artifact with co m.fasterxml.jackson.core_jackson-databind version  2.13.2.1

Hints (optional):