Update jackson-databind to 2.10.5.1 (fixes CVE-2020-25649)

[overheadhunter]

Bump jackson-databind, as the new version contains a fix for a vulnerability.

While java-jwt itself is probably not affected due to the nature of JWT not being XML-based, we can not say for sure if this can't be exploited in downstream projects.

Changes

Updated library version

References

FasterXML/jackson-databind#2589

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

• This change adds test coverage
• This change has been tested on the latest version of Java: Merely a smoke test, but I've updated the dependency in my downstream project using JDK 15 and I did not encounter any issues with JWTs

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors

[jimmyjames]

Thanks for this! We're targeting a new release this week to also address #457, so this should be available soon.