{ "@id": "urn:uuid:926ec1b8-154f-41d3-adf9-0aa05cfd362f", "role": "Document Creator", "author": "https://tuxcare.com", "version": 25, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T13:25:49.956211+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-09T13:25:49.956211+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2018-5968 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-09T13:25:49.956211+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2019-12814 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2019-14379 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:18:00.086829+00:00", "status_notes": "Vulnerability CVE-2019-16335 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2019-16942 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:14:00.111317+00:00", "status_notes": "Vulnerability CVE-2019-17267 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2019-20330 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-10650 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-10673 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-10969 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:46:00.063715+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:46:00.063715+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:51.204935+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:47:00.109735+00:00", "status_notes": "Vulnerability CVE-2020-36180 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-36181 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:07:00.051711+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:20:06.412115+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:20:06.412115+00:00", "status_notes": "Vulnerability CVE-2020-36188 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T05:55:00.096664+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-8840 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T08:18:00.086829+00:00", "status_notes": "Vulnerability CVE-2020-9547 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T06:09:00.037970+00:00", "status_notes": "Vulnerability CVE-2021-20190 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:51.204935+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-02T19:40:07.620299+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.5.4 is not affected by CVE-2026-19032. The vulnerable feature (java.nio.file.Path deserialization via NioPathDeserializer) was added to jackson-databind in May 2016 (commit 68d1c17e8b, first shipped in version 2.8.0 released July 2016), nearly one year after version 2.5.4 was released (June 9, 2015). The target repository contains no Path deserialization code, no NioPathDeserializer c...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 Version 2.5.4 is not affected by CVE-2026-19032. The vulnerable feature (java.nio.file.Path deserialization via NioPathDeserializer) was added to jackson-databind in May 2016 (commit 68d1c17e8b, first shipped in version 2.8.0 released July 2016), nearly one year after version 2.5.4 was released (June 9, 2015). The target repository contains no Path deserialization code, no NioPathDeserializer c..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-30T12:44:49.281020+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Version 2.5.4 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV), which was introduced in version 2.10.0. Version 2.5.4 predates this security mechanism entirely. The CVE describes bypassing PTV validation of generic type parameters; since PTV does not exist in 2.5.4, the specific vulnerable pattern (incomplete PTV validation) is absent. While 2.5.4 processes generic type IDs without any validation (ClassNameIdResolver line 57-60), this represents a different architectural state than the CVE's scenario where PTV exists but incompletely validates type parameters.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.5.4 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV), which was introduced in version 2.10.0. Version 2.5.4 predates this security mechanism entirely. The CVE describes bypassing PTV validation of generic type parameters; since PTV does not exist in 2.5.4, the specific vulnerable pattern (incomplete PTV validation) is absent. While 2.5.4 processes generic type IDs without any validation (ClassNameIdResolver line 57-60), this represents a different architectural state than the CVE's scenario where PTV exists but incompletely validates type parameters." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.5.4 predates the introduction of the vulnerable code. The per-property case-insensitive format feature (@JsonFormat with ACCEPT_CASE_INSENSITIVE_PROPERTIES) was introduced in version 2.8.0+. The vulnerable code pattern (checking for this feature and rebuilding the BeanPropertyMap with case-insensitivity) does not exist in version 2.5.4's codebase. The CVE correctly states affected ver...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.5.4 predates the introduction of the vulnerable code. The per-property case-insensitive format feature (@JsonFormat with ACCEPT_CASE_INSENSITIVE_PROPERTIES) was introduced in version 2.8.0+. The vulnerable code pattern (checking for this feature and rebuilding the BeanPropertyMap with case-insensitivity) does not exist in version 2.5.4's codebase. The CVE correctly states affected ver..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-09T13:25:49.956211+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-03T02:05:58.493775+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.5.4 is not affected by CVE-2026-54518. The vulnerability requires the processUnwrappedCreatorProperties() method which does not exist in this version. Unwrapped creator parameters are not functional in 2.5.4 - the feature was implemented later in version 2.19.0+ (commit 502fe888da, not an ancestor of HEAD). The test for this feature (TestUnwrappedWithCreator265.java) is in the failing...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.5.4 is not affected by CVE-2026-54518. The vulnerability requires the processUnwrappedCreatorProperties() method which does not exist in this version. Unwrapped creator parameters are not functional in 2.5.4 - the feature was implemented later in version 2.19.0+ (commit 502fe888da, not an ancestor of HEAD). The test for this feature (TestUnwrappedWithCreator265.java) is in the failing..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-03T01:42:00.098539+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Jackson-databind 2.5.4 does not support Java Records, which are the prerequisite for CVE-2026-59888. The vulnerability specifically affects Records where ignored components must remain in the canonical constructor. Version 2.5.4 (released June 2015) predates Java Records (introduced March 2020) by 5 years. While the _renameUsing() method exists and lacks the fix's ignore-propagation logic, regu...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Jackson-databind 2.5.4 does not support Java Records, which are the prerequisite for CVE-2026-59888. The vulnerability specifically affects Records where ignored components must remain in the canonical constructor. Version 2.5.4 (released June 2015) predates Java Records (introduced March 2020) by 5 years. While the _renameUsing() method exists and lacks the fix's ignore-propagation logic, regu..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:12.666793+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-30T12:44:49.281020+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-30T12:44:49.281020+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-11-05T10:57:35.927660+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:51.204935+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-30T12:45:01.272779+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.5.4-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-28T17:21:51.204935+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.5.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.5.4-tuxcare.2" } } ], "timestamp": "2026-10-29T07:57:13.458746+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.5.4-tuxcare.2.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }