{ "@id": "urn:uuid:c63e8d67-a202-41ec-9061-a2f5e074bbaa", "role": "Document Creator", "author": "https://tuxcare.com", "version": 17, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T13:38:52.641724+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2018-12023 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-12023" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-06T09:12:49.763446+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-10672 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10672" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2020-10968 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10968" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2020-10969 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10969" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-11111 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11111" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-11620 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11620" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-14061 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14061" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-14195 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14195" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-09T13:38:52.641724+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36184 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" }, "action_statement": "Vulnerability CVE-2020-36184 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-02T19:41:51.390197+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.4 is NOT AFFECTED by CVE-2026-19032. The vulnerability requires java.nio.file.Path deserialization functionality (NioPathDeserializer), which was added to jackson-databind in version 2.8.0 (May 2016), five months after version 2.6.4 was released (December 2015). The target version cannot deserialize Path fields from JSON, so the attack chain (untrusted JSON \u2192 Path binding \u2192...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.4 is NOT AFFECTED by CVE-2026-19032. The vulnerability requires java.nio.file.Path deserialization functionality (NioPathDeserializer), which was added to jackson-databind in version 2.8.0 (May 2016), five months after version 2.6.4 was released (December 2015). The target version cannot deserialize Path fields from JSON, so the attack chain (untrusted JSON \u2192 Path binding \u2192..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Version 2.6.4 is NOT AFFECTED by CVE-2026-54512. The CVE describes bypassing a PolymorphicTypeValidator (PTV) allow-list by smuggling denied classes as generic type parameters. Version 2.6.4 predates PTV (introduced ~2.10.0) and uses a fundamentally different architecture: a hardcoded SubTypeValidator deny-list that applies uniformly to all deserialized types, whether direct or type parameters. The vulnerable code path (_resolveAndValidateGeneric method) does not exist in this version. While type parameters are not validated during type construction (ClassNameIdResolver._typeFromId lines 57-58), this architectural difference is not exploitable without the PTV allow-list mechanism that the CVE specifically targets. The CVE's version range \"From 2.10.0 until...\" correctly excludes 2.6.4.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.6.4 is NOT AFFECTED by CVE-2026-54512. The CVE describes bypassing a PolymorphicTypeValidator (PTV) allow-list by smuggling denied classes as generic type parameters. Version 2.6.4 predates PTV (introduced ~2.10.0) and uses a fundamentally different architecture: a hardcoded SubTypeValidator deny-list that applies uniformly to all deserialized types, whether direct or type parameters. The vulnerable code path (_resolveAndValidateGeneric method) does not exist in this version. While type parameters are not validated during type construction (ClassNameIdResolver._typeFromId lines 57-58), this architectural difference is not exploitable without the PTV allow-list mechanism that the CVE specifically targets. The CVE's version range \"From 2.10.0 until...\" correctly excludes 2.6.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.4 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature introduced in version 2.8.0. Version 2.6.4 only has the global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES (added in 2.5) and lacks the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) code path where the vulnerability occurs. The vulnerable cod...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.6.4 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature introduced in version 2.8.0. Version 2.6.4 only has the global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES (added in 2.5) and lacks the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) code path where the vulnerability occurs. The vulnerable cod..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-09T13:38:52.641724+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-03T02:15:15.563545+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.4 does not have the vulnerable code path. The `processUnwrappedCreatorProperties()` method that CVE-2026-54518 patches fix does not exist in this version. The feature to support `@JsonUnwrapped` with `@JsonCreator` was implemented much later (commit 502fe888da, November 2024, first in version 2.19.0), while 2.6.4 is from December 2015. Although 2.6.4 detects unwrapped creator parame...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.6.4 does not have the vulnerable code path. The `processUnwrappedCreatorProperties()` method that CVE-2026-54518 patches fix does not exist in this version. The feature to support `@JsonUnwrapped` with `@JsonCreator` was implemented much later (commit 502fe888da, November 2024, first in version 2.19.0), while 2.6.4 is from December 2015. Although 2.6.4 detects unwrapped creator parame..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-03T01:47:52.626697+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.4 is not affected by CVE-2026-59888. This vulnerability is specific to Java Records deserialization and only affects versions >= 2.15.0. Version 2.6.4 was released in December 2015, approximately 4 years before Java Records were introduced in Java 14 (2019), and contains no Record support code. The upstream patch comments explicitly state that POJOs \"never had the same expl...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.4 is not affected by CVE-2026-59888. This vulnerability is specific to Java Records deserialization and only affects versions >= 2.15.0. Version 2.6.4 was released in December 2015, approximately 4 years before Java Records were introduced in Java 14 (2019), and contains no Record support code. The upstream patch comments explicitly state that POJOs \"never had the same expl..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-02T20:42:00.122720+00:00", "status_notes": "Vulnerability CVE-2026-83557 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.4 is NOT AFFECTED by CVE-2026-83557. The vulnerable component (DefaultBaseTypeLimitingValidator) does not exist in this version, which predates the PolymorphicTypeValidator framework (introduced in jackson-databind 2.10) by approximately 4 years. The CVE describes an incomplete denylist in DefaultBaseTypeLimitingValidator where java.lang.Comparable is missing from the unsafe base ty...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-83557" }, "impact_statement": "not_affected \u2014 Version 2.6.4 is NOT AFFECTED by CVE-2026-83557. The vulnerable component (DefaultBaseTypeLimitingValidator) does not exist in this version, which predates the PolymorphicTypeValidator framework (introduced in jackson-databind 2.10) by approximately 4 years. The CVE describes an incomplete denylist in DefaultBaseTypeLimitingValidator where java.lang.Comparable is missing from the unsafe base ty..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-11-01T09:29:00.113053+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.4-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-29T07:57:13.458746+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.6.4-tuxcare.1.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }