jackson-databind 3.0.0 renders callbacks property from Spring CGLIB Proxy instances. This means that objects that are secured using Spring Security's method security will have additional properties rendered.
See the disabled test at core/src/test/java/org/springframework/security/authorization/AuthorizationAdvisorProxyFactoryTests.java for a reproducer
See FasterXML/jackson-databind#5354