{ "@id": "urn:uuid:7a260390-35ff-453d-9316-4244c736c618", "role": "Document Creator", "author": "https://tuxcare.com", "version": 23, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T14:39:21.095909+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2017-7525 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Target version 2.6.7.1 is not affected by CVE-2017-7525. This version already contains the upstream vendor fix (commit fa87c1ddbe803ebb7295f5c2ebfe38e12f6e6162 by Tatu Saloranta) that adds blocklist validation to prevent deserialization of dangerous gadget classes. The CVE specifically states that versions \"before 2.6.7.1\" are affected, making 2.6.7.1 the first fixed version in the 2.6.x branch. TuxCare onboarded this already-fixed upstream version.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-7525" }, "impact_statement": "Target version 2.6.7.1 is not affected by CVE-2017-7525. This version already contains the upstream vendor fix (commit fa87c1ddbe803ebb7295f5c2ebfe38e12f6e6162 by Tatu Saloranta) that adds blocklist validation to prevent deserialization of dangerous gadget classes. The CVE specifically states that versions \"before 2.6.7.1\" are affected, making 2.6.7.1 the first fixed version in the 2.6.x branch. TuxCare onboarded this already-fixed upstream version." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:38:56.086707+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2018-19362 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2018-5968 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2019-12086 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T06:11:00.041702+00:00", "status_notes": "Vulnerability CVE-2019-14379 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:38:45.555659+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:38:45.555659+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:38:39.556734+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:00.926848+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:11.017646+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-14062 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:00.926848+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:54:23.078084+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:05.788709+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T08:19:00.118156+00:00", "status_notes": "Vulnerability CVE-2020-9547 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:54:23.078084+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-02T19:41:40.021021+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.7.1 does NOT have java.nio.file.Path deserialization support. The vulnerable Path deserializer (NioPathDeserializer / JDKFromStringDeserializer with Path support) does not exist in this version, which was released in 2016 before this feature was added. Exhaustive search confirmed: zero occurrences of Path deserialization code, Path is not registered in JdkDeserializers or F...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.7.1 does NOT have java.nio.file.Path deserialization support. The vulnerable Path deserializer (NioPathDeserializer / JDKFromStringDeserializer with Path support) does not exist in this version, which was released in 2016 before this feature was added. Exhaustive search confirmed: zero occurrences of Path deserialization code, Path is not registered in JdkDeserializers or F..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:16.409065+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Version 2.6.7.1 is not affected by CVE-2026-54512. This CVE concerns a bypass of PolymorphicTypeValidator (PTV), where generic type parameters are not validated even though the container class is. PTV was introduced in jackson-databind 2.10.0, and version 2.6.7.1 predates this feature. Exhaustive searches confirm that version 2.6.7.1 does not contain: (1) the PolymorphicTypeValidator interface/classes, (2) the vulnerable _resolveAndValidateGeneric() method in DatabindContext, or (3) any validation methods like validateSubClassName or validateSubType. While version 2.6.7.1 does parse generic parameters via ClassNameIdResolver._typeFromId() calling typeFactory.constructFromCanonical(id), it lacks the architectural component (PTV) that defines the vulnerability scope. The CVE describes a scenario where PTV is configured with an allow-list, the container passes validation, but the generic parameter bypasses it. Without PTV, there is no security policy to bypass. This is Type A2: the attack chain requires PTV as an architectural component to define what classes should be blocked, and this component is absent in 2.6.7.1.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.6.7.1 is not affected by CVE-2026-54512. This CVE concerns a bypass of PolymorphicTypeValidator (PTV), where generic type parameters are not validated even though the container class is. PTV was introduced in jackson-databind 2.10.0, and version 2.6.7.1 predates this feature. Exhaustive searches confirm that version 2.6.7.1 does not contain: (1) the PolymorphicTypeValidator interface/classes, (2) the vulnerable _resolveAndValidateGeneric() method in DatabindContext, or (3) any validation methods like validateSubClassName or validateSubType. While version 2.6.7.1 does parse generic parameters via ClassNameIdResolver._typeFromId() calling typeFactory.constructFromCanonical(id), it lacks the architectural component (PTV) that defines the vulnerability scope. The CVE describes a scenario where PTV is configured with an allow-list, the container passes validation, but the generic parameter bypasses it. Without PTV, there is no security policy to bypass. This is Type A2: the attack chain requires PTV as an architectural component to define what classes should be blocked, and this component is absent in 2.6.7.1." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.7.1 is not affected by CVE-2026-54515. The vulnerability requires the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) feature, which was introduced in version 2.8.0. Version 2.6.7.1 only supports global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES, which is applied during initial BeanPropertyMap construction before @JsonIgnoreProperties filtering, preventing the vul...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.6.7.1 is not affected by CVE-2026-54515. The vulnerability requires the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) feature, which was introduced in version 2.8.0. Version 2.6.7.1 only supports global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES, which is applied during initial BeanPropertyMap construction before @JsonIgnoreProperties filtering, preventing the vul..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-03T02:14:00.097227+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.7.1-tuxcare.3 is not affected by CVE-2026-54518. The vulnerability requires the processUnwrappedCreatorProperties() method to replay buffered JSON into unwrapped creator parameters without checking JsonView visibility. This method does not exist in version 2.6.7.1 - it was added in commit 502fe888 (Nov 2024) as part of implementing full unwrapped creator parameter support (#1467), 7...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.6.7.1-tuxcare.3 is not affected by CVE-2026-54518. The vulnerability requires the processUnwrappedCreatorProperties() method to replay buffered JSON into unwrapped creator parameters without checking JsonView visibility. This method does not exist in version 2.6.7.1 - it was added in commit 502fe888 (Nov 2024) as part of implementing full unwrapped creator parameter support (#1467), 7..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-03T01:47:52.626697+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.7.1 is not affected by CVE-2026-59888. This vulnerability is specific to Java Records, which were introduced in Java 14/16 (2020-2021), years after this version was released (July 2017). The target lacks Java Records support and the Records-specific code path where @JsonIgnore-annotated Record components survive property removal and get renamed. For regular POJOs, the upstream patch...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Version 2.6.7.1 is not affected by CVE-2026-59888. This vulnerability is specific to Java Records, which were introduced in Java 14/16 (2020-2021), years after this version was released (July 2017). The target lacks Java Records support and the Records-specific code path where @JsonIgnore-annotated Record components survive property removal and get renamed. For regular POJOs, the upstream patch..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:19:27.848919+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:54:23.078084+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:54:23.078084+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-09T14:39:21.095909+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-11-01T11:55:04.714077+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.7.1-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-28T17:20:06.792875+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.6.7.1-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.7.1-tuxcare.2" } } ], "timestamp": "2026-10-29T07:57:13.458746+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.6.7.1-tuxcare.2.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }