{ "@id": "urn:uuid:fd3b26f1-cf4d-4408-b1d0-b66f070c1cd6", "role": "Document Creator", "author": "https://tuxcare.com", "version": 2, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T14:10:00.837302+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-11307 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-qr7j-h6gg-jmgc (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-11307" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-qr7j-h6gg-jmgc (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-12022 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cjjf-94ff-43w7 (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.6).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-12022" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cjjf-94ff-43w7 (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.6)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-12023 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-6wqp-v4v6-c87c (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.6).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-12023" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-6wqp-v4v6-c87c (affected up to 2.9.6), NVD (affected up to 2.9.6), Snyk (affected up to 2.9.6)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-14718 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. The upstream fix 87d29af (#2097, blocks org.slf4j.ext.EventData and 3 other gadgets) is included in this version. CVE-2018-14718 affects only <2.6.7.3, 2.7.0\u20132.7.9.4, 2.8.0\u20132.8.11.2, 2.9.0\u20132.9.6 (GHSA-645p-88qh-w398).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-14718" }, "impact_statement": "The upstream fix 87d29af (#2097, blocks org.slf4j.ext.EventData and 3 other gadgets) is included in this version. CVE-2018-14718 affects only <2.6.7.3, 2.7.0\u20132.7.9.4, 2.8.0\u20132.8.11.2, 2.9.0\u20132.9.6 (GHSA-645p-88qh-w398)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-14720 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-x2w5-5m2g-7h5m (affected up to 2.9.7), NVD (affected up to 2.9.7), Snyk (affected up to 2.9.7).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-14720" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-x2w5-5m2g-7h5m (affected up to 2.9.7), NVD (affected up to 2.9.7), Snyk (affected up to 2.9.7)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-14721 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9mxf-g3x6-wv74 (affected up to 2.9.7), NVD (affected up to 2.9.7), Snyk (affected up to 2.9.7).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-14721" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9mxf-g3x6-wv74 (affected up to 2.9.7), NVD (affected up to 2.9.7), Snyk (affected up to 2.9.7)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-19360 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f9hv-mg5h-xcw9 (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-19360" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f9hv-mg5h-xcw9 (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-19361 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mx9v-gmh4-mgqw (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-19361" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mx9v-gmh4-mgqw (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-19362 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c8hm-7hpq-7jhg (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-19362" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c8hm-7hpq-7jhg (affected up to 2.9.8), NVD (affected up to 2.9.8), Snyk (affected up to 2.9.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-5968 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-w3f4-3q6j-rh82 (affected up to 2.9.4), NVD (affected up to 2.9.4), Snyk (affected up to 2.9.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-5968" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-w3f4-3q6j-rh82 (affected up to 2.9.4), NVD (affected up to 2.9.4), Snyk (affected up to 2.9.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2018-7489 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cggj-fvv3-cqwv (affected up to 2.9.5), NVD (affected up to 2.9.5), Snyk (affected up to 2.9.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-7489" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cggj-fvv3-cqwv (affected up to 2.9.5), NVD (affected up to 2.9.5), Snyk (affected up to 2.9.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-12086 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5ww9-j83m-q7qx (affected up to 2.9.9), NVD (affected up to 2.9.9), Snyk (affected up to 2.9.9).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-12086" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5ww9-j83m-q7qx (affected up to 2.9.9), NVD (affected up to 2.9.9), Snyk (affected up to 2.9.9)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-12384 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 The target (jackson-databind 2.19.1) already blocks ch.qos.logback.core.db.DriverManagerConnectionSource in SubTypeValidator's deny list. The upstream fix commit c9ef4a10 (\"Fix #2334\", by Tatu Saloranta) is an ancestor of the first TuxCare commit, so it shipped in the upstream release.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-12384" }, "impact_statement": "not_affected \u2014 The target (jackson-databind 2.19.1) already blocks ch.qos.logback.core.db.DriverManagerConnectionSource in SubTypeValidator's deny list. The upstream fix commit c9ef4a10 (\"Fix #2334\", by Tatu Saloranta) is an ancestor of the first TuxCare commit, so it shipped in the upstream release." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-12814 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target jackson-databind 2.19.1 already contains the upstream fix for CVE-2019-12814 (databind#2341). SubTypeValidator's deny list blocks org.jdom.transform.XSLTransformer and org.jdom2.transform.XSLTransformer. The fix came from upstream commit 5f7c69bb (author tatu.saloranta@iki.fi), which is in the upstream release that TuxCare onboarded.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-12814" }, "impact_statement": "not_affected \u2014 Target jackson-databind 2.19.1 already contains the upstream fix for CVE-2019-12814 (databind#2341). SubTypeValidator's deny list blocks org.jdom.transform.XSLTransformer and org.jdom2.transform.XSLTransformer. The fix came from upstream commit 5f7c69bb (author tatu.saloranta@iki.fi), which is in the upstream release that TuxCare onboarded." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-14379 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-6fpp-rgj9-8rwc (affected up to 2.9.9.2), NVD (affected up to 2.9.9.2), Snyk (affected up to 2.9.9.2).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-14379" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-6fpp-rgj9-8rwc (affected up to 2.9.9.2), NVD (affected up to 2.9.9.2), Snyk (affected up to 2.9.9.2)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-14439 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-gwp4-hfv6-p7hw (affected up to 2.9.9.2), NVD (affected up to 2.9.9.2), Snyk (affected up to 2.9.9.2).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-14439" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-gwp4-hfv6-p7hw (affected up to 2.9.9.2), NVD (affected up to 2.9.9.2), Snyk (affected up to 2.9.9.2)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-14540 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h822-r4r5-v8jg (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-14540" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h822-r4r5-v8jg (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-16335 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-85cw-hj65-qqv9 (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-16335" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-85cw-hj65-qqv9 (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-16942 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mx7p-6679-8g3q (affected up to 2.9.10.1), NVD (affected up to 2.9.10.1), Snyk (affected up to 2.9.10.1).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-16942" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mx7p-6679-8g3q (affected up to 2.9.10.1), NVD (affected up to 2.9.10.1), Snyk (affected up to 2.9.10.1)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-16943 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-fmmc-742q-jg75 (affected up to 2.9.10.1), NVD (affected up to 2.9.10.1), Snyk (affected up to 2.9.10.1).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-16943" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-fmmc-742q-jg75 (affected up to 2.9.10.1), NVD (affected up to 2.9.10.1), Snyk (affected up to 2.9.10.1)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-17267 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f3j5-rmmp-3fc5 (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-17267" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f3j5-rmmp-3fc5 (affected up to 2.9.10), NVD (affected up to 2.9.10), Snyk (affected up to 2.9.10)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2019-20330 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-gww7-p5w4-wrfv (affected up to 2.9.10.2), NVD (affected up to 2.9.10.2), Snyk (affected up to 2.9.10.2).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2019-20330" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-gww7-p5w4-wrfv (affected up to 2.9.10.2), NVD (affected up to 2.9.10.2), Snyk (affected up to 2.9.10.2)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-10650 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-rpr3-cw39-3pxh (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10650" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-rpr3-cw39-3pxh (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-10672 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-95cm-88f5-f2c7 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10672" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-95cm-88f5-f2c7 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-10673 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-fqwf-pjwf-7vqv (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10673" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-fqwf-pjwf-7vqv (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-10968 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-rf6r-2c4q-2vwg (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10968" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-rf6r-2c4q-2vwg (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-10969 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-758m-v56v-grj4 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10969" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-758m-v56v-grj4 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-11112 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-58pp-9c76-5625 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11112" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-58pp-9c76-5625 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-11113 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9vvp-fxw6-jcxr (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11113" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9vvp-fxw6-jcxr (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-11619 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-27xj-rqx5-2255 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11619" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-27xj-rqx5-2255 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-11620 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h4rc-386g-6m85 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11620" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h4rc-386g-6m85 (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-14060 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-j823-4qch-3rgm (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14060" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-j823-4qch-3rgm (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-14061 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c2q3-4qrh-fm48 (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14061" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c2q3-4qrh-fm48 (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-14062 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c265-37vj-cwcc (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14062" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-c265-37vj-cwcc (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-14195 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mc6h-4qgp-37qh (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14195" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-mc6h-4qgp-37qh (affected up to 2.9.10.5), NVD (affected up to 2.9.10.5), Snyk (affected up to 2.9.10.5)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-24616 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h3cw-g4mq-c5x2 (affected up to 2.9.10.6), NVD (affected up to 2.9.10.6), Snyk (affected up to 2.9.10.6).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-24616" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-h3cw-g4mq-c5x2 (affected up to 2.9.10.6), NVD (affected up to 2.9.10.6), Snyk (affected up to 2.9.10.6)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-24750 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-qjw2-hr98-qgfh (affected up to 2.9.10.6), NVD (affected up to 2.9.10.6), Snyk (affected up to 2.9.10.6).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-24750" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-qjw2-hr98-qgfh (affected up to 2.9.10.6), NVD (affected up to 2.9.10.6), Snyk (affected up to 2.9.10.6)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-25649 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" }, "action_statement": "Vulnerability CVE-2020-25649 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-35490 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-wh8g-3j2c-rqj5 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-35490" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-wh8g-3j2c-rqj5 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-35491 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-r3gr-cxrf-hg25 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-35491" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-r3gr-cxrf-hg25 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-35728 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5r5r-6hpj-8gg9 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-35728" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5r5r-6hpj-8gg9 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36179 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9gph-22xh-8x98 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36179" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9gph-22xh-8x98 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36180 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-8c4j-34r4-xr8g (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36180" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-8c4j-34r4-xr8g (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36181 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cvm9-fjm9-3572 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36181" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-cvm9-fjm9-3572 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36182 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-89qr-369f-5m5x (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36182" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-89qr-369f-5m5x (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36183 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9m6f-7xcq-8vf8 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36183" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-9m6f-7xcq-8vf8 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36184 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-m6x4-97wx-4q27 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36184" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-m6x4-97wx-4q27 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36185 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-8w26-6f25-cm9x (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36185" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-8w26-6f25-cm9x (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36186 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-v585-23hc-c647 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36186" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-v585-23hc-c647 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36187 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-r695-7vr9-jgc2 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36187" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-r695-7vr9-jgc2 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36188 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f9xh-2qgp-cq57 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36188" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-f9xh-2qgp-cq57 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36189 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-vfqx-33qm-g869 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-36189" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-vfqx-33qm-g869 (affected up to 2.9.10.8), NVD (affected up to 2.9.10.8), Snyk (affected up to 2.9.10.8)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-8840 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-4w82-r329-3q67 (affected up to 2.9.10.3), NVD (affected up to 2.9.10.3), Snyk (affected up to 2.9.10.3).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-8840" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-4w82-r329-3q67 (affected up to 2.9.10.3), NVD (affected up to 2.9.10.3), Snyk (affected up to 2.9.10.3)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-9546 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5p34-5m6p-p58g (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9546" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-5p34-5m6p-p58g (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-9547 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-q93h-jc49-78gg (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9547" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-q93h-jc49-78gg (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2020-9548 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-p43x-xfjf-5jhr (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9548" }, "impact_statement": "Prechecker: An upstream release that contains the fix is part of this version's source history, and the code the fix removes is gone. Version 2.19.1 is on a newer release line than any version the advisories list as affected. Advisories: GitHub GHSA-p43x-xfjf-5jhr (affected up to 2.9.10.4), NVD (affected up to 2.9.10.4), Snyk (affected up to 2.9.10.4)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2022-42004 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" }, "action_statement": "Vulnerability CVE-2022-42004 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-19032 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-19032" }, "action_statement": "Vulnerability CVE-2026-19032 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-50193 does not affect version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target 2.19.1 already contains the upstream fix for databind #3447. JsonNode.toString() and toPrettyString() delegate to InternalNodeMapper, which serializes with a non-recursive, iterator-stack writer, so the recursive text rendering behind the DoS is gone. The fix commit a1fa4ae4 is by the upstream author Tatu Saloranta. It is an ancestor of HEAD and of the first TuxCare commit (the 2.19.1 on...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-50193" }, "impact_statement": "not_affected \u2014 Target 2.19.1 already contains the upstream fix for databind #3447. JsonNode.toString() and toPrettyString() delegate to InternalNodeMapper, which serializes with a non-recursive, iterator-stack writer, so the recursive text rendering behind the DoS is gone. The fix commit a1fa4ae4 is by the upstream author Tatu Saloranta. It is an ancestor of HEAD and of the first TuxCare commit (the 2.19.1 on..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54514 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" }, "action_statement": "Vulnerability CVE-2026-54514 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54515 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54515" }, "action_statement": "Vulnerability CVE-2026-54515 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-54518 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54518" }, "action_statement": "Vulnerability CVE-2026-54518 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-59888 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59888" }, "action_statement": "Vulnerability CVE-2026-59888 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:10:00.837302+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.19.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.1-tuxcare.1" } } ], "timestamp": "2026-11-09T14:09:05.227676+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.19.1-tuxcare.1.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }