{ "@id": "urn:uuid:3581a4a4-aaaf-4b73-b742-3d8794fa690f", "role": "Document Creator", "author": "https://tuxcare.com", "version": 3, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-12T07:52:16.879525+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2018-14720 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-19362 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2018-5968 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2018-7489 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2019-12086 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2019-12384 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2019-12814 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-14379 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2019-16335 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2019-16942 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2019-17267 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2019-20330 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-10650 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-10673 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-10969 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-11112 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-14062 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36180 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36181 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36188 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:16.879525+00:00", "status_notes": "Vulnerability CVE-2020-8840 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-9546 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:52:00.042369+00:00", "status_notes": "Vulnerability CVE-2020-9547 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Jackson 2.4.1 does not have java.nio.file.Path deserialization support. The vulnerable NioPathDeserializer and Path binding feature was added in May 2016 (commit de160fdda0), two years after this version was released (June 2014). The target cannot process the vulnerability's INPUT (JSON to Path field binding), satisfying Rule 5 Type A1.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 Jackson 2.4.1 does not have java.nio.file.Path deserialization support. The vulnerable NioPathDeserializer and Path binding feature was added in May 2016 (commit de160fdda0), two years after this version was released (June 2014). The target cannot process the vulnerability's INPUT (JSON to Path field binding), satisfying Rule 5 Type A1." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. Version 2.4.1 is not affected by CVE-2026-54512. The vulnerability describes a PolymorphicTypeValidator (PTV) bypass where generic type parameters are not validated. However, PolymorphicTypeValidator does not exist in version 2.4.1 - it was introduced in version 2.10.0 (as indicated by the CVE's affected version range starting at 2.10.0). While this version does process type identifiers with generic parameters via ClassNameIdResolver, there is no security mechanism being bypassed. The vulnerable code pattern (PTV validation that checks containers but not their generic parameters) is not present in this version.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.4.1 is not affected by CVE-2026-54512. The vulnerability describes a PolymorphicTypeValidator (PTV) bypass where generic type parameters are not validated. However, PolymorphicTypeValidator does not exist in version 2.4.1 - it was introduced in version 2.10.0 (as indicated by the CVE's affected version range starting at 2.10.0). While this version does process type identifiers with generic parameters via ClassNameIdResolver, there is no security mechanism being bypassed. The vulnerable code pattern (PTV validation that checks containers but not their generic parameters) is not present in this version." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target version 2.4.1 is not affected by CVE-2026-54515. The vulnerability requires the case-insensitive property mapping feature (JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES and BeanPropertyMap.withCaseInsensitivity()) which was introduced in version 2.8.0 or later. Version 2.4.1 completely lacks this feature\u2014the vulnerable code block is absent from BeanDeserializerBase.createContextu...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Target version 2.4.1 is not affected by CVE-2026-54515. The vulnerability requires the case-insensitive property mapping feature (JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES and BeanPropertyMap.withCaseInsensitivity()) which was introduced in version 2.8.0 or later. Version 2.4.1 completely lacks this feature\u2014the vulnerable code block is absent from BeanDeserializerBase.createContextu..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54516 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54516" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-54517 does NOT affect jackson-databind version 2.4.1. The vulnerability requires the isMerging() mechanism (introduced in version 2.20+, August 2025) to route setterless collection/map properties through the property-based creator buffering path. Version 2.4.1 (released ~2014) predates this feature by over a decade. Without isMerging(), setterless properties cannot complete the propert...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 CVE-2026-54517 does NOT affect jackson-databind version 2.4.1. The vulnerability requires the isMerging() mechanism (introduced in version 2.20+, August 2025) to route setterless collection/map properties through the property-based creator buffering path. Version 2.4.1 (released ~2014) predates this feature by over a decade. Without isMerging(), setterless properties cannot complete the propert..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.4.1 predates the vulnerable feature by approximately 10 years. The CVE-2026-54518 vulnerability exists in `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()`, a method that processes @JsonUnwrapped constructor parameters without checking @JsonView restrictions. This method does not exist in version 2.4.1. The target has only `processUnwrapped()` for regular field/setter pro...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.4.1 predates the vulnerable feature by approximately 10 years. The CVE-2026-54518 vulnerability exists in `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()`, a method that processes @JsonUnwrapped constructor parameters without checking @JsonView restrictions. This method does not exist in version 2.4.1. The target has only `processUnwrapped()` for regular field/setter pro..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.4.1 is NOT AFFECTED by CVE-2026-59888. The vulnerability requires Java Record support combined with @JsonIgnore and PropertyNamingStrategy. This version predates Java Records (introduced JDK 16, 2021) and has no Record deserialization support. For POJOs and constructor-based classes, ignored properties are removed by _removeUnwantedProperties() BEFORE _renameUsing() applies naming str...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Version 2.4.1 is NOT AFFECTED by CVE-2026-59888. The vulnerability requires Java Record support combined with @JsonIgnore and PropertyNamingStrategy. This version predates Java Records (introduced JDK 16, 2021) and has no Record deserialization support. For POJOs and constructor-based classes, ignored properties are removed by _removeUnwantedProperties() BEFORE _renameUsing() applies naming str..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-68497 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-83557 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-83557" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.4.1-tuxcare.6 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1-tuxcare.6" } } ], "timestamp": "2026-11-12T07:51:17.831150+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.4.1-tuxcare.6.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }