Upgrade jackson-jr-objects to 2.15.0 or higher to remediate DDoS vulnerability

[abiskop]

Release cf-java-logging-support-log4j2: 3.8.4 transitively depends on jackson-core: 2.14.2:

[INFO] |  +- com.sap.hcp.cf.logging:cf-java-logging-support-log4j2:jar:3.8.4:compile
[INFO] |  |  \- com.sap.hcp.cf.logging:cf-java-logging-support-core:jar:3.8.4:compile
[INFO] |  |     \- com.fasterxml.jackson.jr:jackson-jr-objects:jar:2.14.2:compile
[INFO] |  |        \- com.fasterxml.jackson.core:jackson-core:jar:2.14.2:compile

Library jackson-core: 2.14.2 contains a DDoS vulnerability, see e.g.: https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538

Please consider upgrading to 2.15.0 or higher.

[KarstenSchnitter]

Thanks, for raising this issue. Note, that the vulnerability is during deserialization of JSON data. This library uses jackson only for serialization. Nevertheless, I will upgrade the dependency and create a new library version soon.