A moderate vulnerability was found in the version of jackson-databind in pcore-java.
pom.xml update suggested: com.fasterxml.jackson.core:jackson-databind ~> 2.9.9.2
merged: https://github.com/puppetlabs/pcore-java/pull/12