com.fasterxml.jackson.dataformat:jackson-dataformat-xml vulnerabilities (Maven)

2 vulnerabilities.

• com.fasterxml.jackson.dataformat:jackson-dataformat-xml Maven jackson-dataformat-xml vulnerable to server side request forgery (SSRF) CVE-2016-7051 Fix available 8.6 HighApril 14, 2017
• com.fasterxml.jackson.dataformat:jackson-dataformat-xml Maven jackson-dataformat-xml vulnerable to XML external entity (XXE) CVE-2016-3720 Fix available 9.8 CriticalMay 13, 2016