{ "@id": "urn:uuid:fbdad59b-406c-450d-9fda-118475c06147", "role": "Document Creator", "author": "https://tuxcare.com", "version": 7, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-12T07:47:51.387816+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2018-19362 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2018-7489 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-25649 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" }, "action_statement": "Vulnerability CVE-2020-25649 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-36184 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36184" }, "action_statement": "Vulnerability CVE-2020-36184 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:51.387816+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-10T10:45:00.039830+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.4.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-12T07:47:00.093762+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2022-42004 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. CVE-2022-42004 does not affect jackson-databind version 2.1.4. The vulnerability requires the UNWRAP_SINGLE_VALUE_ARRAYS deserialization feature to be explicitly enabled, but this feature does not exist in version 2.1.4. According to the upstream patches and git history, UNWRAP_SINGLE_VALUE_ARRAYS was introduced in version 2.4 (as indicated by the @since 2.4 tag). Version 2.1.4 predates this feature by several releases, so the vulnerable code path cannot be triggered. The target's DeserializationFeature enum contains only ACCEPT_SINGLE_VALUE_AS_ARRAY and UNWRAP_ROOT_VALUE, but not UNWRAP_SINGLE_VALUE_ARRAYS. Additionally, the _deserializeFromArray method that contains the vulnerable unwrapping logic in patched versions does not exist in the 2.1.4 codebase.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-42004" }, "impact_statement": "CVE-2022-42004 does not affect jackson-databind version 2.1.4. The vulnerability requires the UNWRAP_SINGLE_VALUE_ARRAYS deserialization feature to be explicitly enabled, but this feature does not exist in version 2.1.4. According to the upstream patches and git history, UNWRAP_SINGLE_VALUE_ARRAYS was introduced in version 2.4 (as indicated by the @since 2.4 tag). Version 2.1.4 predates this feature by several releases, so the vulnerable code path cannot be triggered. The target's DeserializationFeature enum contains only ACCEPT_SINGLE_VALUE_AS_ARRAY and UNWRAP_ROOT_VALUE, but not UNWRAP_SINGLE_VALUE_ARRAYS. Additionally, the _deserializeFromArray method that contains the vulnerable unwrapping logic in patched versions does not exist in the 2.1.4 codebase." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.1.4 is NOT AFFECTED by CVE-2026-19032. The target version predates the introduction of java.nio.file.Path deserialization support. The vulnerable component (NioPathDeserializer class) does not exist in this version - it was added in later releases (2.8.x+). The Brief's INPUT (URI string for a Path field) cannot be received because Path field deserialization is not implemented...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.1.4 is NOT AFFECTED by CVE-2026-19032. The target version predates the introduction of java.nio.file.Path deserialization support. The vulnerable component (NioPathDeserializer class) does not exist in this version - it was added in later releases (2.8.x+). The Brief's INPUT (URI string for a Path field) cannot be received because Path field deserialization is not implemented..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54514 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-54514. The InetSocketAddress deserialization feature that contains the vulnerability was not added to jackson-databind until June 2013 (commit ac4059964), four months after version 2.1.4 was released (February 2013). The vulnerable code first appeared in version 2.10.0 (2019). Version 2.1.4 does not process InetSocketAddress inputs at all, making the DN...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54514" }, "impact_statement": "not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-54514. The InetSocketAddress deserialization feature that contains the vulnerability was not added to jackson-databind until June 2013 (commit ac4059964), four months after version 2.1.4 was released (February 2013). The vulnerable code first appeared in version 2.10.0 (2019). Version 2.1.4 does not process InetSocketAddress inputs at all, making the DN..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind version 2.1.4 is NOT affected by CVE-2026-54515. The target version (2.1.4) predates the affected version range (2.8.0 to 2.18.9/2.21.5/3.1.4). The vulnerable code path - the case-insensitive property map rebuild that can restore @JsonIgnoreProperties-excluded properties - does not exist in this version. The @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) feature and the BeanPr...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 jackson-databind version 2.1.4 is NOT affected by CVE-2026-54515. The target version (2.1.4) predates the affected version range (2.8.0 to 2.18.9/2.21.5/3.1.4). The vulnerable code path - the case-insensitive property map rebuild that can restore @JsonIgnoreProperties-excluded properties - does not exist in this version. The @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) feature and the BeanPr..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-09T13:29:02.596729+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.3.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.1.4-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-54518. The vulnerability requires the feature of @JsonUnwrapped on creator parameters (introduced in issue #1467, commit 502fe888da), which does not exist in version 2.1.4. The vulnerable method UnwrappedPropertyHandler.processUnwrappedCreatorProperties() is absent from the target, and neither CreatorProperty nor SettableBeanProperty has unwrapped-handl...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-54518. The vulnerability requires the feature of @JsonUnwrapped on creator parameters (introduced in issue #1467, commit 502fe888da), which does not exist in version 2.1.4. The vulnerable method UnwrappedPropertyHandler.processUnwrappedCreatorProperties() is absent from the target, and neither CreatorProperty nor SettableBeanProperty has unwrapped-handl..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-59888. The vulnerability is specific to Java Record deserialization with @JsonIgnore and PropertyNamingStrategy. Java Records are a JDK 16+ language feature introduced in 2021, while jackson-databind 2.1.4 dates from 2012-2013 and has no Record support. The vulnerable code path (Record-specific handling in POJOPropertiesCollector) does not exist in this...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Version 2.1.4 is not affected by CVE-2026-59888. The vulnerability is specific to Java Record deserialization with @JsonIgnore and PropertyNamingStrategy. Java Records are a JDK 16+ language feature introduced in 2021, while jackson-databind 2.1.4 dates from 2012-2013 and has no Record support. The vulnerable code path (Record-specific handling in POJOPropertiesCollector) does not exist in this..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-68497 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2026-83557 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-83557" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability CVE-2026-91777 does not affect version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Target version 2.1.4 does not contain the vulnerable code pattern. CollectionDeserializer and MapDeserializer completely lack forward reference resolution infrastructure (no CollectionReferringAccumulator, MapReferringAccumulator, or resolveForwardReference methods). An object-ID reference that is not yet resolved is rejected immediately: BeanDeserializerBase.deserializeFromObjectId and AbstractDeserializer._deserializeFromObjectId throw IllegalStateException (Could not resolve Object Id -- unresolved forward-reference?), so no pending references are ever accumulated. The vulnerability's Goal (excessive CPU consumption via linear search in forward reference resolution) is unreachable because this mechanism was not yet implemented in 2.1.4.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-91777" }, "impact_statement": "Target version 2.1.4 does not contain the vulnerable code pattern. CollectionDeserializer and MapDeserializer completely lack forward reference resolution infrastructure (no CollectionReferringAccumulator, MapReferringAccumulator, or resolveForwardReference methods). An object-ID reference that is not yet resolved is rejected immediately: BeanDeserializerBase.deserializeFromObjectId and AbstractDeserializer._deserializeFromObjectId throw IllegalStateException (Could not resolve Object Id -- unresolved forward-reference?), so no pending references are ever accumulated. The vulnerability's Goal (excessive CPU consumption via linear search in forward reference resolution) is unreachable because this mechanism was not yet implemented in 2.1.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.1.4-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.1.4-tuxcare.2" } } ], "timestamp": "2026-11-06T10:38:04.718370+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.1.4-tuxcare.2.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }