{ "@id": "urn:uuid:6d984240-3886-4c73-a534-0c9f6e09cb10", "role": "Document Creator", "author": "https://tuxcare.com", "version": 9, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-06T18:52:00.040792+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-12023 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-12023" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T09:12:49.763446+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-10672 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10672" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-10968 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10968" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-10969 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10969" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-11111 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11111" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-11620 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11620" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-14061 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14061" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-14195 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14195" }, "impact_statement": "Jackson Databind 2.6.6 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T10:34:51.807417+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-02T19:44:46.630610+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.6 does not have java.nio.file.Path deserialization support. CVE-2026-19032 affects the Path deserialization feature (NioPathDeserializer) which allows untrusted JSON to drive arbitrary FileSystemProvider selection via unrestricted URI schemes. This feature was added to jackson-databind after version 2.6.6 was released (April 2016). Target version 2.6.6 only supports deseria...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.6 does not have java.nio.file.Path deserialization support. CVE-2026-19032 affects the Path deserialization feature (NioPathDeserializer) which allows untrusted JSON to drive arbitrary FileSystemProvider selection via unrestricted URI schemes. This feature was added to jackson-databind after version 2.6.6 was released (April 2016). Target version 2.6.6 only supports deseria..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-02T19:11:00.084109+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.6 does NOT contain CVE-2026-54515. The vulnerability requires per-property @JsonFormat case-insensitive overrides that trigger BeanPropertyMap rebuilding, which then incorrectly restores properties filtered out by @JsonIgnoreProperties. Version 2.6.6 lacks all components of this vulnerability pattern: (1) no _handleByNameInclusion() method to filter properties, (2) no BeanPropertyMa...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.6.6 does NOT contain CVE-2026-54515. The vulnerability requires per-property @JsonFormat case-insensitive overrides that trigger BeanPropertyMap rebuilding, which then incorrectly restores properties filtered out by @JsonIgnoreProperties. Version 2.6.6 lacks all components of this vulnerability pattern: (1) no _handleByNameInclusion() method to filter properties, (2) no BeanPropertyMa..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T10:34:51.807417+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-03T02:20:11.117097+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.6 is NOT AFFECTED by CVE-2026-54518. The vulnerability requires the unwrapped creator parameter feature, which was implemented in version 2.19 (commit 502fe888da, Nov 2024). Version 2.6.6 has detection code for @JsonUnwrapped on creator parameters but lacks the processing logic (processUnwrappedCreatorProperties method) that would execute the vulnerable code path. When @JsonUnwrappe...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.6.6 is NOT AFFECTED by CVE-2026-54518. The vulnerability requires the unwrapped creator parameter feature, which was implemented in version 2.19 (commit 502fe888da, Nov 2024). Version 2.6.6 has detection code for @JsonUnwrapped on creator parameters but lacks the processing logic (processUnwrappedCreatorProperties method) that would execute the vulnerable code path. When @JsonUnwrappe..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-03T01:54:00.103016+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.6 is NOT affected by CVE-2026-59888. This vulnerability is specific to Java Records (a language feature introduced in Java 16) combined with PropertyNamingStrategy bypassing @JsonIgnore annotations. Version 2.6.6 (released 2016, targeting Java 7/8) predates Java Records by 5 years and lacks the Records deserialization infrastructure that enables this vulnerability. The CVE'...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.6 is NOT affected by CVE-2026-59888. This vulnerability is specific to Java Records (a language feature introduced in Java 16) combined with PropertyNamingStrategy bypassing @JsonIgnore annotations. Version 2.6.6 (released 2016, targeting Java 7/8) predates Java Records by 5 years and lacks the Records deserialization infrastructure that enables this vulnerability. The CVE'..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T10:34:51.807417+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-11-06T10:34:51.807417+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.6-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.6.6-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.6-tuxcare.3" } } ], "timestamp": "2026-10-30T12:46:36.654073+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.6.6-tuxcare.3.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }