{ "@id": "urn:uuid:c0a58f44-52f8-4454-b41d-54704fb73a1b", "role": "Document Creator", "author": "https://tuxcare.com", "version": 3, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-11-13T09:18:00.112997+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2017-17485 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. CVE-2017-17485 affects jackson-databind through version 2.8.10. The target is version 2.8.11-tuxcare.4, which includes the complete upstream fix released in version 2.8.11 on December 24, 2017. The fix (SubTypeValidator with blacklist and Spring framework pattern matching) was authored by upstream maintainer Tatu Saloranta and shipped in the upstream release before TuxCare onboarding. The vulnerable deserialization pattern is not present in this version.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (>= 2.9.0, < 2.9.4; >= 2.8.0, < 2.8.11; < 2.7.9.2), NVD (< 2.6.7.3; >= 2.7.0, < 2.7.9.2; >= 2.8.0, < 2.8.11; >= 2.9.0, < 2.9.4), Snyk (< 2.8.11; >= 2.9.0, < 2.9.4).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-17485" }, "impact_statement": "CVE-2017-17485 affects jackson-databind through version 2.8.10. The target is version 2.8.11-tuxcare.4, which includes the complete upstream fix released in version 2.8.11 on December 24, 2017. The fix (SubTypeValidator with blacklist and Spring framework pattern matching) was authored by upstream maintainer Tatu Saloranta and shipped in the upstream release before TuxCare onboarding. The vulnerable deserialization pattern is not present in this version.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (>= 2.9.0, < 2.9.4; >= 2.8.0, < 2.8.11; < 2.7.9.2), NVD (< 2.6.7.3; >= 2.7.0, < 2.7.9.2; >= 2.8.0, < 2.8.11; >= 2.9.0, < 2.9.4), Snyk (< 2.8.11; >= 2.9.0, < 2.9.4)." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2017-7525 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. Target jackson-databind version 2.8.11-tuxcare.4 is NOT affected by CVE-2017-7525. The vulnerability was fixed in upstream version 2.8.9 (commit 60d459cedc by upstream maintainer Tatu Saloranta), and the target version 2.8.11 includes this fix plus additional enhancements. The fix introduces SubTypeValidator with a blacklist of dangerous classes that prevents polymorphic deserialization of types that could lead to remote code execution. This is an upstream fix that was already present in the 2.8.11 release that TuxCare onboarded.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9), NVD (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9; = 2.9.0-prerelease1; = 2.9.0-prerelease2), cve.org (< 2.6.7.1; < 2.7.9.1; < 2.8.9), Snyk (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-7525" }, "impact_statement": "Target jackson-databind version 2.8.11-tuxcare.4 is NOT affected by CVE-2017-7525. The vulnerability was fixed in upstream version 2.8.9 (commit 60d459cedc by upstream maintainer Tatu Saloranta), and the target version 2.8.11 includes this fix plus additional enhancements. The fix introduces SubTypeValidator with a blacklist of dangerous classes that prevents polymorphic deserialization of types that could lead to remote code execution. This is an upstream fix that was already present in the 2.8.11 release that TuxCare onboarded.\n\nAdvisory cross-check (dlmn): outside the affected ranges of GitHub (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9), NVD (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9; = 2.9.0-prerelease1; = 2.9.0-prerelease2), cve.org (< 2.6.7.1; < 2.7.9.1; < 2.8.9), Snyk (< 2.6.7.1; >= 2.7.0, < 2.7.9.1; >= 2.8.0, < 2.8.9)." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-11307 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-14718 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-13T09:18:00.112997+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-13T09:18:00.112997+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-13T09:18:00.112997+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-19362 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-5968 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2018-7489 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-12086 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-12384 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-12814 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-14379 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T11:00:06.216836+00:00", "status_notes": "Vulnerability CVE-2019-14540 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-16335 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-16942 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2019-20330 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-10650 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T11:00:06.216836+00:00", "status_notes": "Vulnerability CVE-2020-10672 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-10673 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-10969 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-11111 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-11112 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-11113 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-11619 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T11:00:06.216836+00:00", "status_notes": "Vulnerability CVE-2020-11620 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-14060 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-14061 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-14062 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-14195 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-24616 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-24750 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-35491 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-35728 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36181 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36182 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36183 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T11:00:06.216836+00:00", "status_notes": "Vulnerability CVE-2020-36187 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36188 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-8840 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-13T09:18:00.112997+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind, and is fixed in 2.8.11-tuxcare.9." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-9547 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2021-20190 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2021-46877 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-46877" }, "action_statement": "Vulnerability CVE-2021-46877 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-110879 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-110879" }, "action_statement": "Vulnerability CVE-2026-110879 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-19032" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. Version 2.8.11 is not affected by CVE-2026-54512. The CVE describes a vulnerability in PolymorphicTypeValidator (PTV) and the _resolveAndValidateGeneric() method, both of which were introduced in version 2.10.0. Version 2.8.11 predates these components and uses a different validation mechanism (SubTypeValidator, a hardcoded blacklist) instead of the configurable PTV allow-list that is the subject of this CVE. The CVE explicitly scopes the affected versions as \"from 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" - version 2.8.11 is outside this range.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.8.11 is not affected by CVE-2026-54512. The CVE describes a vulnerability in PolymorphicTypeValidator (PTV) and the _resolveAndValidateGeneric() method, both of which were introduced in version 2.10.0. Version 2.8.11 predates these components and uses a different validation mechanism (SubTypeValidator, a hardcoded blacklist) instead of the configurable PTV allow-list that is the subject of this CVE. The CVE explicitly scopes the affected versions as \"from 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\" - version 2.8.11 is outside this range." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54513 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54513" }, "action_statement": "Vulnerability CVE-2026-54513 affects version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54515" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54516 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54516" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54517 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target version 2.8.11-tuxcare.4 is NOT affected by CVE-2026-54517. The vulnerability requires setterless properties to be routed through an unguarded buffering path via the isMerging() mechanism, which was introduced in commit 4f4f3169d4 (first appearing in version 2.9.0). Version 2.8.11 predates this mechanism. Setterless properties in 2.8.11 are handled through the normal deserialize(p, ctxt,...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-54517" }, "impact_statement": "not_affected \u2014 Target version 2.8.11-tuxcare.4 is NOT affected by CVE-2026-54517. The vulnerability requires setterless properties to be routed through an unguarded buffering path via the isMerging() mechanism, which was introduced in commit 4f4f3169d4 (first appearing in version 2.9.0). Version 2.8.11 predates this mechanism. Setterless properties in 2.8.11 are handled through the normal deserialize(p, ctxt,..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-54518 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 CVE-2026-54518 requires @JsonUnwrapped on creator parameters, a feature that does not exist in jackson-databind 2.8.11. The vulnerability targets UnwrappedPropertyHandler.processUnwrappedCreatorProperties(), which was introduced @since 2.19 when issue #1467 added unwrapped creator support (2024-11-13). Version 2.8.11 predates this feature entirely. Evidence: (1) processUnwrappedCreatorPropertie...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54518" }, "impact_statement": "not_affected \u2014 CVE-2026-54518 requires @JsonUnwrapped on creator parameters, a feature that does not exist in jackson-databind 2.8.11. The vulnerability targets UnwrappedPropertyHandler.processUnwrappedCreatorProperties(), which was introduced @since 2.19 when issue #1467 added unwrapped creator support (2024-11-13). Version 2.8.11 predates this feature entirely. Evidence: (1) processUnwrappedCreatorPropertie..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-59888 does not affect version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 The target jackson-databind 2.8.11-tuxcare.4 is NOT AFFECTED by CVE-2026-59888. This vulnerability specifically affects Java Records with @JsonIgnore annotations when using PropertyNamingStrategy. Java Records were introduced in Java 14 (2020) and finalized in Java 17, but version 2.8.11 targets Java 7 and contains no Record-specific code. The vulnerable code pattern (missing ignore propagation...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-59888" }, "impact_statement": "not_affected \u2014 The target jackson-databind 2.8.11-tuxcare.4 is NOT AFFECTED by CVE-2026-59888. This vulnerability specifically affects Java Records with @JsonIgnore annotations when using PropertyNamingStrategy. Java Records were introduced in Java 14 (2020) and finalized in Java 17, but version 2.8.11 targets Java 7 and contains no Record-specific code. The vulnerable code pattern (missing ignore propagation..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-68497 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-77310 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-83557 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-83557" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-91776 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability CVE-2026-91777 is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.8.11-tuxcare.8 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11-tuxcare.8" } } ], "timestamp": "2026-11-10T10:59:43.309650+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.8.11-tuxcare.8.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }