upgrade jackson-databind and spring MVC
cherry-pick from !242 (merged) and !238 (merged) with Jackson and spring MVC security issues mitigation.
Edited by Rustam Lotsmanenko (EPAM)
cherry-pick from !242 (merged) and !238 (merged) with Jackson and spring MVC security issues mitigation.