Fasterxml Jackson-dataformat-xml vulnerabilities

• fasterxml jackson-dataformat-xml jackson-dataformat-xml vulnerable to server side request forgery (SSRF) CVE-2016-7051 Fix available 8.6 HighApril 14, 2017
• fasterxml jackson-dataformat-xml, fedoraproject fedora +1 more jackson-dataformat-xml vulnerable to XML external entity (XXE) CVE-2016-3720 Fix available 9.8 CriticalMay 13, 2016