Root has patched CVE-2020-8840 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.
{
"severity": "CRITICAL",
"distro_version": "",
"source": "Root",
"distro": "maven"
}