{
  "@id": "urn:uuid:9fe28068-ca8c-48e9-97dc-4d9be62a727c",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T05:00:00.256680+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.16.2-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.16.2-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-03T05:00:00.256680+00:00",
      "status_notes": "Vulnerability CVE-2023-3894 does not affect version 2.16.2-tuxcare.2 of com.fasterxml.jackson.dataformat:jackson-dataformat-toml. not_affected \u2014 The target repository (jackson-dataformats-text 2.16.2-tuxcare.3) is NOT affected by CVE-2023-3894. The vulnerability (unbounded TOML nesting depth leading to stack overflow DOS) has been remediated by an upstream vendor fix that was already included in the 2.16.2 release. The fix adds nesting depth tracking and validation in the TOML lexer (toml.jflex) and parser (Parser.java), rejecting input...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-3894"
      },
      "impact_statement": "not_affected \u2014 The target repository (jackson-dataformats-text 2.16.2-tuxcare.3) is NOT affected by CVE-2023-3894. The vulnerability (unbounded TOML nesting depth leading to stack overflow DOS) has been remediated by an upstream vendor fix that was already included in the 2.16.2 release. The fix adds nesting depth tracking and validation in the TOML lexer (toml.jflex) and parser (Parser.java), rejecting input..."
    }
  ]
}