{ "@id": "urn:uuid:9f36d732-469e-42b9-8439-05f2d5ae0c26", "role": "Document Creator", "author": "https://tuxcare.com", "version": 20, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-09T13:17:21.590586+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T09:12:49.763446+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T08:18:00.086829+00:00", "status_notes": "Vulnerability CVE-2019-12384 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-29T01:39:12.873936+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:21.590586+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:23:00.109399+00:00", "status_notes": "Vulnerability CVE-2020-14062 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:39.757926+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:23:00.109399+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:23:00.109399+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T06:10:00.036260+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:00.176686+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-29T01:13:36.432303+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:39.757926+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-02T19:39:08.428117+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.6.5 is NOT AFFECTED by CVE-2026-19032. The vulnerability requires Path deserialization support (binding JSON to java.nio.file.Path fields), which does not exist in this version. The vulnerable code pattern (NioPathHelper.deserialize with ServiceLoader enumeration) was introduced in later Jackson versions (3.x series). Version 2.6.5 only supports a fixed se...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.6.5 is NOT AFFECTED by CVE-2026-19032. The vulnerability requires Path deserialization support (binding JSON to java.nio.file.Path fields), which does not exist in this version. The vulnerable code pattern (NioPathHelper.deserialize with ServiceLoader enumeration) was introduced in later Jackson versions (3.x series). Version 2.6.5 only supports a fixed se..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-01T11:58:00.188379+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Version 2.6.5 is not affected by CVE-2026-54512. The CVE explicitly scopes to \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" and describes a vulnerability where PolymorphicTypeValidator (PTV) can be bypassed via generic type parameters. Version 2.6.5 predates the introduction of PTV (added in 2.10.0) and therefore lacks the affected component entirely. While 2.6.5 does parse generic type parameters in ClassNameIdResolver without validation, the specific vulnerability\u2014bypassing PTV's allow-list via type parameters\u2014cannot occur because PTV does not exist in this version. TuxCare has backported this CVE to affected versions (2.14.1, 2.17.2, 2.17.3) but not to 2.6.5, confirming it falls outside the vulnerability scope.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.6.5 is not affected by CVE-2026-54512. The CVE explicitly scopes to \"From 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" and describes a vulnerability where PolymorphicTypeValidator (PTV) can be bypassed via generic type parameters. Version 2.6.5 predates the introduction of PTV (added in 2.10.0) and therefore lacks the affected component entirely. While 2.6.5 does parse generic type parameters in ClassNameIdResolver without validation, the specific vulnerability\u2014bypassing PTV's allow-list via type parameters\u2014cannot occur because PTV does not exist in this version. TuxCare has backported this CVE to affected versions (2.14.1, 2.17.2, 2.17.3) but not to 2.6.5, confirming it falls outside the vulnerability scope." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.5 is not affected by CVE-2026-54515. The vulnerability requires the per-property case-insensitive feature (@JsonFormat with ACCEPT_CASE_INSENSITIVE_PROPERTIES) which was added to jackson-databind in May 2016, approximately 4 months after version 2.6.5 was released in January 2016. The vulnerable code block in BeanDeserializerBase.createContextual() that checks this feature and rebui...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.6.5 is not affected by CVE-2026-54515. The vulnerability requires the per-property case-insensitive feature (@JsonFormat with ACCEPT_CASE_INSENSITIVE_PROPERTIES) which was added to jackson-databind in May 2016, approximately 4 months after version 2.6.5 was released in January 2016. The vulnerable code block in BeanDeserializerBase.createContextual() that checks this feature and rebui..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:21.590586+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-03T02:01:27.808430+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.5 is not affected by CVE-2026-54518 because the unwrapped creator parameters feature does not exist in this version. The vulnerability requires the `processUnwrappedCreatorProperties()` method to replay buffered JSON into creator parameters without checking `visibleInView()`. This method was not added until much later (commit 502fe888da, 2024-11-12). In version 2.6.5, unwrapped crea...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.6.5 is not affected by CVE-2026-54518 because the unwrapped creator parameters feature does not exist in this version. The vulnerability requires the `processUnwrappedCreatorProperties()` method to replay buffered JSON into creator parameters without checking `visibleInView()`. This method was not added until much later (commit 502fe888da, 2024-11-12). In version 2.6.5, unwrapped crea..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-03T01:37:00.149642+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target version 2.6.5 (released January 2016) is not affected by CVE-2026-59888. The vulnerability is specific to Java Record deserialization with @JsonIgnore annotations and PropertyNamingStrategy, but Records were introduced in Java 14 (March 2020) and Jackson Record support was added in version 2.12.0 (November 2020). Version 2.6.5 predates Records by 4+ years and contains no Record deseriali...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Target version 2.6.5 (released January 2016) is not affected by CVE-2026-59888. The vulnerability is specific to Java Record deserialization with @JsonIgnore annotations and PropertyNamingStrategy, but Records were introduced in Java 14 (March 2020) and Jackson Record support was added in version 2.12.0 (November 2020). Version 2.6.5 predates Records by 4+ years and contains no Record deseriali..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-28T15:22:30.553540+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T13:17:21.590586+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-01T11:58:00.188379+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-09T10:27:37.551355+00:00", "status_notes": "Vulnerability CVE-2026-83557 does not affect version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind. Prechecker: no vulnerable code from the patch was found, and this version calls none of the distinctive methods on the lines the fix removes. Advisories: GitHub and cve.org (HeroDevs) start the 2.x range at 2.11.0, so this version is older; Snyk lists it only because its 2.x row has no lower bound. Confirmed not affected by the Java ELS team review on 2026-11-06.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-83557" }, "impact_statement": "Prechecker: no vulnerable code from the patch was found, and this version calls none of the distinctive methods on the lines the fix removes. Advisories: GitHub and cve.org (HeroDevs) start the 2.x range at 2.11.0, so this version is older; Snyk lists it only because its 2.x row has no lower bound. Confirmed not affected by the Java ELS team review on 2026-11-06." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-01T11:58:00.188379+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-01T11:58:00.188379+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-11-01T11:58:00.188379+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.5-tuxcare.2 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.6.5-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.5-tuxcare.2" } } ], "timestamp": "2026-10-29T07:57:13.458746+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.6.5-tuxcare.2.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }