{ "@id": "urn:uuid:c63e8d67-a202-41ec-9061-a2f5e074bbaa", "role": "Document Creator", "author": "https://tuxcare.com", "version": 4, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-23T10:54:00.682481+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-15095 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-15095" }, "action_statement": "Vulnerability CVE-2017-15095 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-17485 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-17485" }, "action_statement": "Vulnerability CVE-2017-17485 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2017-7525 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2017-7525" }, "action_statement": "Vulnerability CVE-2017-7525 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2018-12023 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-12023" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14718 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" }, "action_statement": "Vulnerability CVE-2018-14718 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-5968 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-5968" }, "action_statement": "Vulnerability CVE-2018-5968 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2018-7489 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-7489" }, "action_statement": "Vulnerability CVE-2018-7489 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-10672 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10672" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2020-10968 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10968" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:54:00.682481+00:00", "status_notes": "Vulnerability CVE-2020-10969 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-10969" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.7.0" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-11111 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11111" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-11620 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-11620" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-14061 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14061" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-23T10:53:50.260427+00:00", "status_notes": "Vulnerability CVE-2020-14195 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-14195" }, "impact_statement": "Jackson Databind 2.6.4 is not vulnerable as the issue was introduced in 2.9.0" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36184 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" }, "action_statement": "Vulnerability CVE-2020-36184 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2020-36189 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Version 2.6.4 is NOT AFFECTED by CVE-2026-54512. The CVE describes bypassing a PolymorphicTypeValidator (PTV) allow-list by smuggling denied classes as generic type parameters. Version 2.6.4 predates PTV (introduced ~2.10.0) and uses a fundamentally different architecture: a hardcoded SubTypeValidator deny-list that applies uniformly to all deserialized types, whether direct or type parameters. The vulnerable code path (_resolveAndValidateGeneric method) does not exist in this version. While type parameters are not validated during type construction (ClassNameIdResolver._typeFromId lines 57-58), this architectural difference is not exploitable without the PTV allow-list mechanism that the CVE specifically targets. The CVE's version range \"From 2.10.0 until...\" correctly excludes 2.6.4.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54512" }, "impact_statement": "Version 2.6.4 is NOT AFFECTED by CVE-2026-54512. The CVE describes bypassing a PolymorphicTypeValidator (PTV) allow-list by smuggling denied classes as generic type parameters. Version 2.6.4 predates PTV (introduced ~2.10.0) and uses a fundamentally different architecture: a hardcoded SubTypeValidator deny-list that applies uniformly to all deserialized types, whether direct or type parameters. The vulnerable code path (_resolveAndValidateGeneric method) does not exist in this version. While type parameters are not validated during type construction (ClassNameIdResolver._typeFromId lines 57-58), this architectural difference is not exploitable without the PTV allow-list mechanism that the CVE specifically targets. The CVE's version range \"From 2.10.0 until...\" correctly excludes 2.6.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-54515 does not affect version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Version 2.6.4 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature introduced in version 2.8.0. Version 2.6.4 only has the global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES (added in 2.5) and lacks the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) code path where the vulnerability occurs. The vulnerable cod...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-54515" }, "impact_statement": "not_affected \u2014 Version 2.6.4 is not affected by CVE-2026-54515. The vulnerability exists in the per-property case-insensitive deserialization feature introduced in version 2.8.0. Version 2.6.4 only has the global MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES (added in 2.5) and lacks the per-property @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES) code path where the vulnerability occurs. The vulnerable cod..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:05:00.176737+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.6.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:04:00.096975+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" }, "action_statement": "Vulnerability GHSA-mhm7-754m-9p8w affects version 2.6.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." } ] }