Not sure where it's imported from; need to find out. May be AJSC...
AAI-908 Security: CVE-2017-7525 jackson-mapper-asl:1.9.13
AAI-910 Security: CVE-2017-7525 jackson-databind:2.2.3