{ "@id": "urn:uuid:4e165eb1-fce7-40ee-a4b7-c24539130270", "role": "Document Creator", "author": "https://tuxcare.com", "version": 20, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-12T07:49:00.044871+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2018-14718 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "CVE-2018-14718" }, "action_statement": "Vulnerability CVE-2018-14718 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-10T18:10:00.139950+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-10T18:10:00.139950+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-10T18:10:00.139950+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-10T18:09:22.122145+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-10T18:10:00.139950+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-28T17:42:16.936719+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-28T17:42:16.936719+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-28T17:42:16.936719+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-28T17:42:00.129097+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-12T07:49:00.044871+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:12.526756+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-02T19:42:14.105649+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.3 is NOT affected by CVE-2026-19032. The vulnerable code pattern (URI parsing with scheme-based FileSystemProvider resolution via ServiceLoader) was introduced in May 2016, two months AFTER version 2.7.3 was released (March 2016). Version 2.7.3 uses a simple PathDeserializer that only calls Paths.get(String), which treats input as a literal file path without URI parsing, scheme extr...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 Version 2.7.3 is NOT affected by CVE-2026-19032. The vulnerable code pattern (URI parsing with scheme-based FileSystemProvider resolution via ServiceLoader) was introduced in May 2016, two months AFTER version 2.7.3 was released (March 2016). Version 2.7.3 uses a simple PathDeserializer that only calls Paths.get(String), which treats input as a literal file path without URI parsing, scheme extr..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. jackson-databind 2.7.3 is NOT affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) with configurable allow-lists, a feature introduced in version 2.10.0. Version 2.7.3 predates this architecture and uses a simple hardcoded deny-list (SubTypeValidator) instead. The CVE explicitly states the vulnerability exists \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" \u2014 version 2.7.3 is before the starting point. While 2.7.3 CAN process type IDs with generic parameters (via ClassNameIdResolver and TypeFactory.constructFromCanonical), the specific attack vector (bypassing a user-configured PTV allow-list by smuggling denied classes as type parameters) cannot be executed because there is no configurable allow-list mechanism to bypass.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "jackson-databind 2.7.3 is NOT affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) with configurable allow-lists, a feature introduced in version 2.10.0. Version 2.7.3 predates this architecture and uses a simple hardcoded deny-list (SubTypeValidator) instead. The CVE explicitly states the vulnerability exists \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" \u2014 version 2.7.3 is before the starting point. While 2.7.3 CAN process type IDs with generic parameters (via ClassNameIdResolver and TypeFactory.constructFromCanonical), the specific attack vector (bypassing a user-configured PTV allow-list by smuggling denied classes as type parameters) cannot be executed because there is no configurable allow-list mechanism to bypass." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.3 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES), which was introduced in version 2.8.0. The vulnerable code path (BeanPropertyMap rebuild from the unfiltered source) does not exist in version 2.7.3's BeanDeserializerBase.createContextual() method.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.7.3 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES), which was introduced in version 2.8.0. The vulnerable code path (BeanPropertyMap rebuild from the unfiltered source) does not exist in version 2.7.3's BeanDeserializerBase.createContextual() method." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-09T13:27:06.801062+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.5.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.5." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-03T02:38:06.415650+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.7.3 is NOT AFFECTED by CVE-2026-54517. While the underlying code pattern (missing @JsonView check in the property-buffering branch) exists in 2.7.3, setterless properties cannot exploit it because SetterlessProperty.set() throws UnsupportedOperationException, breaking the attack chain. The vulnerability was introduced in 2.21.0+ when SetterlessProperty.isMerging() was added t...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 jackson-databind 2.7.3 is NOT AFFECTED by CVE-2026-54517. While the underlying code pattern (missing @JsonView check in the property-buffering branch) exists in 2.7.3, setterless properties cannot exploit it because SetterlessProperty.set() throws UnsupportedOperationException, breaking the attack chain. The vulnerability was introduced in 2.21.0+ when SetterlessProperty.isMerging() was added t..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-03T02:14:00.097227+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-54518 concerns @JsonView bypass for unwrapped creator parameters in jackson-databind 2.21.0+. Target version 2.7.3 (March 2016) lacks a functioning implementation of the @JsonUnwrapped-with-@JsonCreator feature. While placeholder code exists (BasicDeserializerFactory assigns unwrapped creator parameters the special internal name \"@JsonUnwrapped\"), no execution path routes actual JSON p...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 CVE-2026-54518 concerns @JsonView bypass for unwrapped creator parameters in jackson-databind 2.21.0+. Target version 2.7.3 (March 2016) lacks a functioning implementation of the @JsonUnwrapped-with-@JsonCreator feature. While placeholder code exists (BasicDeserializerFactory assigns unwrapped creator parameters the special internal name \"@JsonUnwrapped\"), no execution path routes actual JSON p..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-03T01:44:10.414958+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target version 2.7.3 is not affected by CVE-2026-59888. The vulnerability is specific to Java Records, which did not exist when this version was released (2016, 5 years before Java Records). The target only supports POJOs, which follow a different code path where @JsonIgnore properties are completely removed before property renaming occurs, preventing the vulnerability. No Record introspection ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Target version 2.7.3 is not affected by CVE-2026-59888. The vulnerability is specific to Java Records, which did not exist when this version was released (2016, 5 years before Java Records). The target only supports POJOs, which follow a different code path where @JsonIgnore properties are completely removed before property renaming occurs, preventing the vulnerability. No Record introspection ..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-05T09:46:47.719470+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-11-01T09:34:00.139462+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-28T17:42:16.936719+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.7.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.3-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:02:19.696516+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.7.3-tuxcare.1.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }