joss depends on jackson-mapper-asl:1.9.11 which has CVE vulnerability CVE-2019-10172

[sxh850297968]

Hi firend,
joss depends on jackson-mapper-asl:1.9.11 which has
CVE vulnerability CVE-2019-10172, and jackson-mapper-asl not be updated in the past 7 years.
I hava two questions.

1. How does the CVE vulnerability CVE-2019-10172 affect joss ? can I ignore this CVE ?
2. Is there any plan to replace jackson-mapper-asl with other software ?

[sxh850297968]

@robert-bor Please help to confirm this issue, thanks.