{ "@id": "urn:uuid:190a7fbe-9eeb-4d8f-a752-fdd700b7ca37", "role": "Document Creator", "author": "https://tuxcare.com", "version": 16, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T13:12:00.052231+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-06T09:12:49.763446+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-06T08:19:00.118156+00:00", "status_notes": "Vulnerability CVE-2019-17267 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-25649 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" }, "action_statement": "Vulnerability CVE-2020-25649 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:59.528513+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36184 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" }, "action_statement": "Vulnerability CVE-2020-36184 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:59.528513+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:59.528513+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:59.528513+00:00", "status_notes": "Vulnerability CVE-2021-20190 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:59:00.139981+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-02T19:42:25.304389+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.4.1.1 does not have java.nio.file.Path deserialization support. The vulnerable NioPathDeserializer class and Path handling logic do not exist in this version. Path deserialization was introduced in version 2.8.0 (May 2016), approximately 2 years and 4 major versions after 2.4.1.1 (2014). Type A1 (input absent) applies: the CVE's INPUT (JSON bound to Path field) is not receive...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.4.1.1 does not have java.nio.file.Path deserialization support. The vulnerable NioPathDeserializer class and Path handling logic do not exist in this version. Path deserialization was introduced in version 2.8.0 (May 2016), approximately 2 years and 4 major versions after 2.4.1.1 (2014). Type A1 (input absent) applies: the CVE's INPUT (JSON bound to Path field) is not receive..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:59:00.139981+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Version 2.4.1.1 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) to exist and be configured, then bypasses it via unvalidated generic type parameters. PTV was introduced in jackson-databind 2.10.0; version 2.4.1.1 predates this introduction and lacks the entire validation infrastructure being bypassed. The CVE explicitly scopes to \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" - version 2.4.1.1 falls outside this affected range. While the target does parse generic type IDs without validation, there is no security mechanism to bypass, making this analogous to a \"firewall bypass\" CVE on a system with no firewall installed.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.4.1.1 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) to exist and be configured, then bypasses it via unvalidated generic type parameters. PTV was introduced in jackson-databind 2.10.0; version 2.4.1.1 predates this introduction and lacks the entire validation infrastructure being bypassed. The CVE explicitly scopes to \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" - version 2.4.1.1 falls outside this affected range. While the target does parse generic type IDs without validation, there is no security mechanism to bypass, making this analogous to a \"firewall bypass\" CVE on a system with no firewall installed." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54515. The vulnerability requires the ACCEPT_CASE_INSENSITIVE_PROPERTIES feature introduced in Jackson 2.5.0, which does not exist in this version. The bug occurs when case-insensitive BeanPropertyMap rebuild restores properties that _handleByNameInclusion() had filtered out. In 2.4.1.1, neither the case-insensitive rebuild mechanism nor the _handleBy...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54515. The vulnerability requires the ACCEPT_CASE_INSENSITIVE_PROPERTIES feature introduced in Jackson 2.5.0, which does not exist in this version. The bug occurs when case-insensitive BeanPropertyMap rebuild restores properties that _handleByNameInclusion() had filtered out. In 2.4.1.1, neither the case-insensitive rebuild mechanism nor the _handleBy..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-03T02:45:20.391162+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54517. While the underlying flaw (missing view check in property-buffering branch at lines 375-378 of BeanDeserializer) exists in the code, the exploitation mechanism does not. Setterless properties cannot successfully traverse the buffering path because: (1) they require a bean instance to deserialize into, which doesn't exist during buffering, and (...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54517. While the underlying flaw (missing view check in property-buffering branch at lines 375-378 of BeanDeserializer) exists in the code, the exploitation mechanism does not. Setterless properties cannot successfully traverse the buffering path because: (1) they require a bean instance to deserialize into, which doesn't exist during buffering, and (..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-03T02:15:15.563545+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54518. The vulnerability targets the method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` which does not exist in this version. The feature it implements\u2014using @JsonUnwrapped with @JsonCreator parameters\u2014was not implemented until commit 502fe888da (\"Implemented #1467: Support for @JsonUnwrapped in @JsonCreators\"), which is not an ance...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.4.1.1 is not affected by CVE-2026-54518. The vulnerability targets the method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` which does not exist in this version. The feature it implements\u2014using @JsonUnwrapped with @JsonCreator parameters\u2014was not implemented until commit 502fe888da (\"Implemented #1467: Support for @JsonUnwrapped in @JsonCreators\"), which is not an ance..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-03T01:50:00.213840+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-59888 is NOT AFFECTED in jackson-databind 2.4.1.1. The vulnerability is specific to Java Record components with @JsonIgnore annotations being bypassed when PropertyNamingStrategy renames fields. Java Records were introduced in Java 16 (2020), but version 2.4.x predates this feature by ~6 years. The target has no Record support (confirmed by absence of isRecord, RecordComponent, _remove...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 CVE-2026-59888 is NOT AFFECTED in jackson-databind 2.4.1.1. The vulnerability is specific to Java Record components with @JsonIgnore annotations being bypassed when PropertyNamingStrategy renames fields. Java Records were introduced in Java 16 (2020), but version 2.4.x predates this feature by ~6 years. The target has no Record support (confirmed by absence of isRecord, RecordComponent, _remove..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:59:00.139981+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:59:00.139981+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-09T13:12:00.052231+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:59:00.139981+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.4.1.1-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:59.528513+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:40:27.453433+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.4.1.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.1.1-tuxcare.2" } } ], "timestamp": "2026-10-29T07:57:13.458746+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.4.1.1-tuxcare.2.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }