{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6cc47857-895e-5b67-be44-088e8fc3e5fa",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "jackson-databind",
      "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3",
      "type": "library",
      "group": "tools.jackson.core",
      "bom-ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3",
      "version": "3.1.2-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "jackson-databind",
            "purl": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2",
            "type": "library",
            "group": "tools.jackson.core",
            "version": "3.1.2"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-110879",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5d234146-084c-54b4-a749-2ddf31f2db4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-110879 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-19032",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:244f2fe2-030f-5a51-8310-ffe995a6ee13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-19032 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-54512",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d756da6-b97b-552e-a52c-4b3661985f52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54512 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54513",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d011a5ac-58fe-5502-b218-5ab6420f5668",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54513 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54514",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b0c9bfa3-8de8-5f60-a1fb-4498393d9ecf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54514 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54515",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:95d442c3-01bd-579a-83bb-1f7733b93678",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54515 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54516",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:842217f2-1fd6-578d-a593-469a4e4c6346",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54516 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54517",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ccf32347-a8a3-5562-b136-4d53ac6e6d4a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-54517 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-54518",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d4149772-e0b9-542c-a13a-26e0c8ed077a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-54518 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-59888",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c9a5248c-b8fb-573c-8495-e70e931a1437",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59888 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind, and is fixed in 3.1.2-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59889",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3769782d-6c8e-5219-b5c5-aeb14c593e95",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59889 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-68497",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5172f90e-7d90-5757-8b30-1fa6b9af8af9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-68497 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-77310",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9161e03b-9eae-5df4-9872-8943d62fad97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-77310 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-83557",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:889a58a9-501e-5a4d-a16f-82e0f78efa33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-83557 affects version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-91776",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d0167bb2-dd0a-5744-88de-f55671da56d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-91776 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    },
    {
      "id": "CVE-2026-91777",
      "affects": [
        {
          "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:078c7729-0fe7-56fe-a204-5982c8324c5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-91777 is fixed in version 3.1.2-tuxcare.3 of tools.jackson.core:jackson-databind."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/tools.jackson.core/jackson-databind@3.1.2-tuxcare.3"
    }
  ]
}