{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2b488c2b-0270-5762-abc8-5f06e905b150",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jackson-databind",
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1",
      "type": "library",
      "group": "tools.jackson.core",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1",
      "version": "3.1.2-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "jackson-databind",
            "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2",
            "type": "library",
            "group": "tools.jackson.core",
            "version": "3.1.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-110879",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7dc510e3-8f81-5205-883b-77a3bcbe0941",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-110879 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-19032",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c63e71e-ceae-542d-8e7a-fc0497e71c66",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19032 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-54512",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aee73730-8ca7-5fdf-8754-e4d68d2c6af3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54512 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54513",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e2629276-0233-5e33-aaff-39f04dfd7633",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54513 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54514",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2c320d5b-5a47-5d73-89a8-ba4f58431f2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54514 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54515",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30e32212-4081-55ba-a26e-5dfc2e3c54f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54515 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54516",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f61f0d23-795f-5b0b-aeeb-da0ab8339d8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54516 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-54517",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41ee406b-e40b-5ccf-a4a2-fdba20c024c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54517 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54518",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:918373ae-6156-5c04-8308-3050833b69aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54518 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59888",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fac80b61-e995-508e-90ca-8bbaac84b434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59888 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59889",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6dca1c4d-3532-55cd-ad1a-c8116858da35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59889 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-68497",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5feb8115-dc0e-5c29-9be1-0b242bba568c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68497 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-77310",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66ca4fc1-2d43-57c0-9d18-16c79064a556",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-77310 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-83557",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa57cd48-9a0f-5665-ac21-416e44bb42d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83557 affects version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-91776",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fd3c585c-394d-596c-9ca7-efdce3509fed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-91776 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-91777",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ded6ef62-a62f-5e49-b467-2304342277eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-91777 is fixed in version 3.1.2-tuxcare.1 of tools.jackson.core:jackson-databind."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.1"
    }
  ]
}