{ "@id": "urn:uuid:b2c33c70-16fa-4d76-b48d-6ccf3ad6fca4", "role": "Document Creator", "author": "https://tuxcare.com", "version": 10, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-10T10:35:00.166759+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2018-14718 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2018-14718" }, "action_statement": "Vulnerability CVE-2018-14718 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36184 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" }, "action_statement": "Vulnerability CVE-2020-36184 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-01T12:12:00.330537+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-06T18:52:00.040792+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-02T19:44:25.987799+00:00", "status_notes": "Vulnerability CVE-2026-19032 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target version 2.7.8 does not contain the vulnerable code pattern. The CVE describes a vulnerability in `NioPathDeserializer` (jackson-databind 2.8.0+) that parses JSON as URI strings and invokes `ServiceLoader` enumeration based on attacker-controlled schemes. Version 2.7.8 predates this implementation and uses the simpler `PathDeserializer` class (src/main/java/com/fasterx...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-19032" }, "impact_statement": "not_affected \u2014 Target version 2.7.8 does not contain the vulnerable code pattern. The CVE describes a vulnerability in `NioPathDeserializer` (jackson-databind 2.8.0+) that parses JSON as URI strings and invokes `ServiceLoader` enumeration based on attacker-controlled schemes. Version 2.7.8 predates this implementation and uses the simpler `PathDeserializer` class (src/main/java/com/fasterx..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. Version 2.7.8 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) - the security mechanism introduced in jackson-databind 2.10.0 - to bypass. Version 2.7.8 predates PTV entirely. While 2.7.8 processes generic type IDs without validation (ClassNameIdResolver line 61-64), the CVE's attack Goal (\"instantiate a class denied by the configured PTV\") cannot be reached because there is no PTV to configure or bypass. The attack chain requires a PTV with an allow/deny list - this prerequisite does not exist in 2.7.8. Rule 5 Type A2 applies: Input is received but the Goal is unreachable.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.7.8 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV) - the security mechanism introduced in jackson-databind 2.10.0 - to bypass. Version 2.7.8 predates PTV entirely. While 2.7.8 processes generic type IDs without validation (ClassNameIdResolver line 61-64), the CVE's attack Goal (\"instantiate a class denied by the configured PTV\") cannot be reached because there is no PTV to configure or bypass. The attack chain requires a PTV with an allow/deny list - this prerequisite does not exist in 2.7.8. Rule 5 Type A2 applies: Input is received but the Goal is unreachable." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-02T19:07:00.143735+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.8 is NOT AFFECTED by CVE-2026-54515. The vulnerability requires per-property case-insensitive property map rebuilding triggered by @JsonFormat(Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES) in BeanDeserializerBase.createContextual(). This feature does not exist in version 2.7.8 - the vulnerable code block that rebuilds the BeanPropertyMap from the wrong source (_beanProperties instead ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.7.8 is NOT AFFECTED by CVE-2026-54515. The vulnerability requires per-property case-insensitive property map rebuilding triggered by @JsonFormat(Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES) in BeanDeserializerBase.createContextual(). This feature does not exist in version 2.7.8 - the vulnerable code block that rebuilds the BeanPropertyMap from the wrong source (_beanProperties instead ..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-10T10:35:00.166759+00:00", "status_notes": "Vulnerability CVE-2026-54516 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6.", "vulnerability": { "name": "CVE-2026-54516" }, "action_statement": "Vulnerability CVE-2026-54516 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.6." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-03T02:51:56.632543+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.8-tuxcare.4 is NOT affected by CVE-2026-54517. The vulnerability requires SetterlessProperty.isMerging() mechanism (introduced \u22652.21.0) that routes setterless Collection/Map properties through the unguarded buffering path in _deserializeUsingPropertyBased. This mechanism is ABSENT in 2.7.8 (grep for \"isMerging\" in src/main/java/com/fasterxml/jackson/databind/deser returns no matches...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 Version 2.7.8-tuxcare.4 is NOT affected by CVE-2026-54517. The vulnerability requires SetterlessProperty.isMerging() mechanism (introduced \u22652.21.0) that routes setterless Collection/Map properties through the unguarded buffering path in _deserializeUsingPropertyBased. This mechanism is ABSENT in 2.7.8 (grep for \"isMerging\" in src/main/java/com/fasterxml/jackson/databind/deser returns no matches..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-03T02:19:57.662365+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.8 is not affected by CVE-2026-54518. The vulnerability requires @JsonUnwrapped annotation support in @JsonCreator parameters, a feature that was not implemented until version 2.19.0+ (added in commit 502fe888da on 2024-11-13). The vulnerable method UnwrappedPropertyHandler.processUnwrappedCreatorProperties() does not exist in this version. The target's UnwrappedPropertyHandler only ...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 Version 2.7.8 is not affected by CVE-2026-54518. The vulnerability requires @JsonUnwrapped annotation support in @JsonCreator parameters, a feature that was not implemented until version 2.19.0+ (added in commit 502fe888da on 2024-11-13). The vulnerable method UnwrappedPropertyHandler.processUnwrappedCreatorProperties() does not exist in this version. The target's UnwrappedPropertyHandler only ..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-03T01:54:00.103016+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.7.8 is not affected by CVE-2026-59888. The vulnerability is specific to Java Records when combined with PropertyNamingStrategy and @JsonIgnore. Version 2.7.8 targets Java 1.6 (released ~2016) and predates Java Records (introduced in Java 14, 2020) by several years. The codebase contains no Record support infrastructure, and TuxCare has not backported this CVE to 2.7.8, having only app...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 Version 2.7.8 is not affected by CVE-2026-59888. The vulnerability is specific to Java Records when combined with PropertyNamingStrategy and @JsonIgnore. Version 2.7.8 targets Java 1.6 (released ~2016) and predates Java Records (introduced in Java 14, 2020) by several years. The codebase contains no Record support infrastructure, and TuxCare has not backported this CVE to 2.7.8, having only app..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-11-05T09:12:34.186982+00:00", "status_notes": "Vulnerability CVE-2026-83557 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5.", "vulnerability": { "name": "CVE-2026-83557" }, "action_statement": "Vulnerability CVE-2026-83557 affects version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.7.8-tuxcare.5." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.7.8-tuxcare.3 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.8-tuxcare.3" } } ], "timestamp": "2026-10-30T12:50:15.371383+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.7.8-tuxcare.3.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }