https://github.com/FasterXML/jackson-bom/releases/tag/jackson-bom-2.21.0
https://github.com/FasterXML/jackson-bom/releases/tag/jackson-bom-2.21.1

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.21
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.21.1

https://github.com/advisories/GHSA-72hv-8253-57qq
https://nvd.nist.gov/vuln/detail/CVE-2026-29062

The NVD entry only lists 3.x thus some tools may not detect this vulnerability.

Additionally, Jackson 2.21.x is a "LTS" version (the current version 2.20.x is not).