{ "@id": "urn:uuid:2487a19a-143c-4c4b-a12b-d056ba8e637d", "role": "Document Creator", "author": "https://tuxcare.com", "version": 6, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-12T07:58:00.052277+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2018-19362 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:57:00.045137+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-16942 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-17267 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:08:00.567507+00:00", "status_notes": "Vulnerability CVE-2020-10650 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:45.060773+00:00", "status_notes": "Vulnerability CVE-2020-10672 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:08:00.567507+00:00", "status_notes": "Vulnerability CVE-2020-10673 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:57:00.045137+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:08:00.567507+00:00", "status_notes": "Vulnerability CVE-2020-11111 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2020-11112 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:08:00.567507+00:00", "status_notes": "Vulnerability CVE-2020-11619 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2020-11620 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-14062 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:57:00.045137+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:08:00.567507+00:00", "status_notes": "Vulnerability CVE-2020-36180 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36181 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2020-9546 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-12T07:58:00.052277+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.1-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2023-35116 does not affect version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2023-35116 affects jackson-core's JsonGenerator implementations (UTF8JsonGenerator, WriterBasedJsonGenerator) which lack nesting depth validation during JSON serialization. The target repository is jackson-databind 2.7.1, which declares jackson-core 2.7.1 as a dependency (pom.xml line 54) but does NOT vendor jackson-core source code. The vulnerable code (JsonGenerator without StreamWriteCon...", "vulnerability": { "name": "CVE-2023-35116" }, "impact_statement": "not_affected \u2014 CVE-2023-35116 affects jackson-core's JsonGenerator implementations (UTF8JsonGenerator, WriterBasedJsonGenerator) which lack nesting depth validation during JSON serialization. The target repository is jackson-databind 2.7.1, which declares jackson-core 2.7.1 as a dependency (pom.xml line 54) but does NOT vendor jackson-core source code. The vulnerable code (JsonGenerator without StreamWriteCon..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 jackson-databind 2.7.1 is NOT affected by CVE-2026-19032. The vulnerable code pattern (URI parsing \u2192 ServiceLoader enumeration \u2192 arbitrary provider.getPath() execution) was introduced in version 2.8 with NioPathDeserializer. Version 2.7.1 only has the simple PathDeserializer that calls Paths.get(String), which treats input as a literal file path string without parsing URI sc...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 jackson-databind 2.7.1 is NOT affected by CVE-2026-19032. The vulnerable code pattern (URI parsing \u2192 ServiceLoader enumeration \u2192 arbitrary provider.getPath() execution) was introduced in version 2.8 with NioPathDeserializer. Version 2.7.1 only has the simple PathDeserializer that calls Paths.get(String), which treats input as a literal file path string without parsing URI sc..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.1 is not affected by CVE-2026-54515. The vulnerability requires per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) support in BeanDeserializerBase.createContextual(), which was introduced in version 2.8.0 (May 2016). Version 2.7.1 (released February 2016) predates this feature. The CVE explicitly states the affected range begins at 2.8.0. The vulnerable code pattern\u2014where ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.7.1 is not affected by CVE-2026-54515. The vulnerability requires per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) support in BeanDeserializerBase.createContextual(), which was introduced in version 2.8.0 (May 2016). Version 2.7.1 (released February 2016) predates this feature. The CVE explicitly states the affected range begins at 2.8.0. The vulnerable code pattern\u2014where ..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:09:00.159509+00:00", "status_notes": "Vulnerability CVE-2026-54516 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54516" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54517 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54517" }, "action_statement": "Vulnerability CVE-2026-54517 affects version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.1 is not affected by CVE-2026-54518. The vulnerability requires the method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` which does not exist in 2.7.1. The feature to support `@JsonUnwrapped` on creator parameters was not implemented until 2024 (commit 502fe888, issue #1467), years after 2.7.1 was released. While 2.7.1 has a placeholder constant `UNWRAPPED_CREATOR_P...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.7.1 is not affected by CVE-2026-54518. The vulnerability requires the method `UnwrappedPropertyHandler.processUnwrappedCreatorProperties()` which does not exist in 2.7.1. The feature to support `@JsonUnwrapped` on creator parameters was not implemented until 2024 (commit 502fe888, issue #1467), years after 2.7.1 was released. While 2.7.1 has a placeholder constant `UNWRAPPED_CREATOR_P..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-59888 affects Java Records with @JsonIgnore annotations when combined with PropertyNamingStrategy. The target jackson-databind 2.7.1 (released February 2016, targeting Java 1.6) predates both Java Records (introduced Java 16, March 2021) and Jackson's Record support (added in Jackson 2.12.0, November 2020) by approximately 5 years. The vulnerable code pattern exists in POJOPropertiesCo...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 CVE-2026-59888 affects Java Records with @JsonIgnore annotations when combined with PropertyNamingStrategy. The target jackson-databind 2.7.1 (released February 2016, targeting Java 1.6) predates both Java Records (introduced Java 16, March 2021) and Jackson's Record support (added in Jackson 2.12.0, November 2020) by approximately 5 years. The vulnerable code pattern exists in POJOPropertiesCo..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-68497 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-83557 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-83557" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.7.1-tuxcare.7 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.1-tuxcare.7" } } ], "timestamp": "2026-11-10T18:07:12.806684+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.7.1-tuxcare.7.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }