{ "@id": "urn:uuid:969486bb-4e74-44b5-bc74-9cd88a64837a", "role": "Document Creator", "author": "https://tuxcare.com", "version": 22, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-12T07:45:32.495164+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-06T10:39:00.035156+00:00", "status_notes": "Vulnerability CVE-2018-14718 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "CVE-2018-14718" }, "action_statement": "Vulnerability CVE-2018-14718 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:48:59.668413+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-29T01:40:02.474913+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:49:06.463687+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-10T11:02:00.039953+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:48:52.522323+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:48:59.668413+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-28T17:27:52.327229+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-28T17:27:52.327229+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:27:00.106913+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-28T17:27:52.327229+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:48:59.668413+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:27:00.106913+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-28T17:27:52.327229+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:05.066690+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-12T07:45:32.495164+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-29T01:02:19.900071+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:27:00.106913+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-02T19:41:40.021021+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Jackson 2.7.0 uses the simple PathDeserializer which calls Paths.get(String) without URI parsing. The vulnerable code path (URI parsing \u2192 Paths.get(URI) \u2192 ServiceLoader-based FileSystemProvider resolution with no scheme restriction) was introduced in version 2.8 with NioPathDeserializer. Version 2.7.0 predates this architectural change and the Input cannot reach the Goal.", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 Jackson 2.7.0 uses the simple PathDeserializer which calls Paths.get(String) without URI parsing. The vulnerable code path (URI parsing \u2192 Paths.get(URI) \u2192 ServiceLoader-based FileSystemProvider resolution with no scheme restriction) was introduced in version 2.8 with NioPathDeserializer. Version 2.7.0 predates this architectural change and the Input cannot reach the Goal." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Version 2.7.0 is not affected by CVE-2026-54512. While the underlying flaw (skipped type parameter validation at type-ID resolution) exists in ClassNameIdResolver._typeFromId(), an alternative defense prevents exploitation: SubTypeValidator.validateSubType() checks all bean types at deserializer creation time, blocking deny-listed gadget classes before instantiation. The CVE's specific vulnerability (PolymorphicTypeValidator allow-list bypass) requires PTV, which was introduced in 2.10.0 and does not exist in 2.7.0.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.7.0 is not affected by CVE-2026-54512. While the underlying flaw (skipped type parameter validation at type-ID resolution) exists in ClassNameIdResolver._typeFromId(), an alternative defense prevents exploitation: SubTypeValidator.validateSubType() checks all bean types at deserializer creation time, blocking deny-listed gadget classes before instantiation. The CVE's specific vulnerability (PolymorphicTypeValidator allow-list bypass) requires PTV, which was introduced in 2.10.0 and does not exist in 2.7.0." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-29T00:12:47.728703+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:27:00.106913+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:26:05.576051+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.0 is not affected by CVE-2026-54515. The vulnerability requires per-property case-insensitive deserialization via @JsonFormat(Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES), which was introduced in version 2.8.0 (released July 2016, after the 2.7.0 release in January 2016). The vulnerable code pattern\u2014where BeanDeserializerBase.createContextual() performs a case-insensitive BeanPropert...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.7.0 is not affected by CVE-2026-54515. The vulnerability requires per-property case-insensitive deserialization via @JsonFormat(Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES), which was introduced in version 2.8.0 (released July 2016, after the 2.7.0 release in January 2016). The vulnerable code pattern\u2014where BeanDeserializerBase.createContextual() performs a case-insensitive BeanPropert..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-09T13:49:06.463687+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.5." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-03T02:37:00.101771+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-54517 does not affect jackson-databind 2.7.0. The vulnerability requires the isMerging() mechanism (introduced in later versions) that routes setterless properties through the property-buffering path. In 2.7.0, setterless properties cannot be successfully applied through this path because PropertyValue.assign() calls prop.set(), which throws UnsupportedOperationException for Setterless...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 CVE-2026-54517 does not affect jackson-databind 2.7.0. The vulnerability requires the isMerging() mechanism (introduced in later versions) that routes setterless properties through the property-buffering path. In 2.7.0, setterless properties cannot be successfully applied through this path because PropertyValue.assign() calls prop.set(), which throws UnsupportedOperationException for Setterless..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-03T02:10:23.173479+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.0 is NOT affected by CVE-2026-54518. The vulnerability requires the @JsonUnwrapped with @JsonCreator feature (issue #1467), which was implemented AFTER version 2.7.0 and is not present in this release. The vulnerable method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` does not exist in the codebase. Evidence: (1) Test file TestUnwrappedWithCreator265.java exists in...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.7.0 is NOT affected by CVE-2026-54518. The vulnerability requires the @JsonUnwrapped with @JsonCreator feature (issue #1467), which was implemented AFTER version 2.7.0 and is not present in this release. The vulnerable method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` does not exist in the codebase. Evidence: (1) Test file TestUnwrappedWithCreator265.java exists in..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-03T01:44:00.124016+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-59888 affects Java Records when combined with PropertyNamingStrategy: @JsonIgnore on Record components is bypassed via renamed JSON keys. The target (jackson-databind 2.7.0-tuxcare.3) does not support Java Records\u2014Records require Java 14+ and Jackson 2.12+, but this version targets Java 1.6. The vulnerable code path (Record deserialization with naming strategy) does not exist. POJOs ar...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 CVE-2026-59888 affects Java Records when combined with PropertyNamingStrategy: @JsonIgnore on Record components is bypassed via renamed JSON keys. The target (jackson-databind 2.7.0-tuxcare.3) does not support Java Records\u2014Records require Java 14+ and Jackson 2.12+, but this version targets Java 1.6. The vulnerable code path (Record deserialization with naming strategy) does not exist. POJOs ar..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-19T20:27:00.106913+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-05T09:14:31.133760+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-11-01T15:51:00.139256+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.3." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-28T17:27:52.327229+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.7.0-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.0-tuxcare.2." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.0-tuxcare.1" } } ], "timestamp": "2026-10-20T12:46:51.138394+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.7.0-tuxcare.1.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }