{
  "@id": "urn:uuid:408de175-6c7a-477c-a937-d9bd36ed14fa",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-19T20:20:15.352131+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42003"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42004"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2023-35116 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability",
      "vulnerability": {
        "name": "CVE-2023-35116"
      },
      "action_statement": "Vulnerability CVE-2023-35116 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-19032"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-50193 does not affect version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.13.3 is not affected by CVE-2026-50193. The vulnerable code pattern (WrapperForSerializer class with recursive _serializeNonRecursive method) does not exist in this version. The vulnerability was introduced during 2.14 development (commit d2ba1ada8, May 3, 2022) and fixed before 2.14.0 release (commit a1fa4ae4e, May 4, 2022). Version 2.13.3 uses simple delegation to ObjectWriter.write...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-50193"
      },
      "impact_statement": "not_affected \u2014 Version 2.13.3 is not affected by CVE-2026-50193. The vulnerable code pattern (WrapperForSerializer class with recursive _serializeNonRecursive method) does not exist in this version. The vulnerability was introduced during 2.14 development (commit d2ba1ada8, May 3, 2022) and fixed before 2.14.0 release (commit a1fa4ae4e, May 4, 2022). Version 2.13.3 uses simple delegation to ObjectWriter.write..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54512 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54512"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54513 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54513"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54514"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54515"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-59889"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-68497 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-68497"
      },
      "action_statement": "Vulnerability CVE-2026-68497 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-77310 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-77310"
      },
      "action_statement": "Vulnerability CVE-2026-77310 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-83557 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-83557"
      },
      "action_statement": "Vulnerability CVE-2026-83557 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-91776 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91776"
      },
      "action_statement": "Vulnerability CVE-2026-91776 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-91777 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91777"
      },
      "action_statement": "Vulnerability CVE-2026-91777 affects version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.13.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "GHSA-mhm7-754m-9p8w"
      }
    }
  ]
}