Resolve CVE-2022-1471: Bump Jackson and Spring Boot in pom.xml

Ref: 
- spring-projects/spring-boot#34405 (comment)
- https://access.redhat.com/documentation/en-us/red_hat_support_for_spring_boot/2.7/html/migrating_applications_to_spring_boot_2.7/migrating-spring-boot-2-5-applications-to-the-spring-boot-version-spring-boot_spring-boot

pom.xml

@@ -57,7 +57,7 @@
     <netty.version>4.1.78.Final</netty.version>
 
     <!-- It's easy for Jackson dependencies to get misaligned, so we manage it ourselves. -->
-    <jackson.version>2.14.0</jackson.version>
+    <jackson.version>2.15.0</jackson.version>
 
     <java-driver.version>4.11.3</java-driver.version>
     <micrometer.version>1.9.3</micrometer.version>
@@ -66,9 +66,9 @@
     <javax-annotation-api.version>1.3.1</javax-annotation-api.version>
 
     <!-- update together -->
-    <spring-boot.version>2.5.14</spring-boot.version>
+    <spring-boot.version>2.7.1</spring-boot.version>
     <spring.version>5.3.27</spring.version>
-    <!-- override spring dependency version, CVE-2022-25857 -->
+    <!-- override spring dependency version, CVE-2022-25857, CVE-2022-1471 -->
     <snakeyaml.version>2.0</snakeyaml.version>
 
     <!-- MySQL connector is GPL, even if it has an OSS exception.