{ "@id": "urn:uuid:47ade408-4dca-41be-8123-cd3c61d97316", "role": "Document Creator", "author": "https://tuxcare.com", "version": 2, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-20T15:56:18.481332+00:00", "statements": [ { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2017-15095 does not affect version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Target version 2.8.11.1 is not affected by CVE-2017-15095. The vulnerability was fixed by upstream vendor FasterXML in version 2.8.11 (CVE scope: \"prior to 2.8.11 and 2.9.4\"). The fix introduced SubTypeValidator.java with comprehensive blacklist entries and pattern-based defenses that block deserialization of dangerous classes. The target version includes this upstream fix with no TuxCare-authored security patches required.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-15095" }, "impact_statement": "Target version 2.8.11.1 is not affected by CVE-2017-15095. The vulnerability was fixed by upstream vendor FasterXML in version 2.8.11 (CVE scope: \"prior to 2.8.11 and 2.9.4\"). The fix introduced SubTypeValidator.java with comprehensive blacklist entries and pattern-based defenses that block deserialization of dangerous classes. The target version includes this upstream fix with no TuxCare-authored security patches required." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2017-17485 does not affect version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is jackson-databind 2.8.11.1 (SHA e5df4cd92). CVE-2017-17485 is the incomplete-fix follow-up to CVE-2017-7525: JSON to ObjectMapper.readValue with polymorphic/default typing could instantiate two Spring \"gadget\" classes \u2014 org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor and org.springframework.beans.factory.config.PropertyPathFactoryBean \u2014 that bypassed the earlier blacklist when Spring is on the classpath, yielding unauthenticated RCE. The upstream fix (issue #1855) landed in the 2.8.11 release line and is present in this 2.8.11.1 tree. SubTypeValidator.validateSubType() now (1) blacklists PropertyPathFactoryBean by exact name and (2) rejects any org.springframework.* class whose superclass chain contains AbstractPointcutAdvisor (catches AbstractBeanFactoryPointcutAdvisor) or AbstractApplicationContext. The guard is reachable: BeanDeserializerFactory.createBeanDeserializer -> _validateSubType (line 142) -> SubTypeValidator.instance().validateSubType (line 866) runs before buildBeanDeserializer for every bean type. Both CVE gadget families are blocked and the check is on the deserialization path, so the target is not affected. The fix is upstream-authored (tatu.saloranta@iki.fi), not a TuxCare backport, so verdict is not_affected (vendor-fix), not already_fixed. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-17485" }, "impact_statement": "not_affected \u2014 Target is jackson-databind 2.8.11.1 (SHA e5df4cd92). CVE-2017-17485 is the incomplete-fix follow-up to CVE-2017-7525: JSON to ObjectMapper.readValue with polymorphic/default typing could instantiate two Spring \"gadget\" classes \u2014 org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor and org.springframework.beans.factory.config.PropertyPathFactoryBean \u2014 that bypassed the earlier blacklist when Spring is on the classpath, yielding unauthenticated RCE. The upstream fix (issue #1855) landed in the 2.8.11 release line and is present in this 2.8.11.1 tree. SubTypeValidator.validateSubType() now (1) blacklists PropertyPathFactoryBean by exact name and (2) rejects any org.springframework.* class whose superclass chain contains AbstractPointcutAdvisor (catches AbstractBeanFactoryPointcutAdvisor) or AbstractApplicationContext. The guard is reachable: BeanDeserializerFactory.createBeanDeserializer -> _validateSubType (line 142) -> SubTypeValidator.instance().validateSubType (line 866) runs before buildBeanDeserializer for every bean type. Both CVE gadget families are blocked and the check is on the deserialization path, so the target is not affected. The fix is upstream-authored (tatu.saloranta@iki.fi), not a TuxCare backport, so verdict is not_affected (vendor-fix), not already_fixed. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-11307 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-11307" }, "action_statement": "Vulnerability CVE-2018-11307 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-12022 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12022" }, "action_statement": "Vulnerability CVE-2018-12022 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-12023 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-12023" }, "action_statement": "Vulnerability CVE-2018-12023 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-14718 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14718" }, "action_statement": "Vulnerability CVE-2018-14718 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-14719 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14719" }, "action_statement": "Vulnerability CVE-2018-14719 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-14720 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14720" }, "action_statement": "Vulnerability CVE-2018-14720 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-14721 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-14721" }, "action_statement": "Vulnerability CVE-2018-14721 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-19360 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19360" }, "action_statement": "Vulnerability CVE-2018-19360 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-19361 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19361" }, "action_statement": "Vulnerability CVE-2018-19361 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-19362 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2018-19362" }, "action_statement": "Vulnerability CVE-2018-19362 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-5968 does not affect version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is jackson-databind at upstream release 2.8.11.1 (HEAD e5df4cd9, tuxcare-current/2.8.11.1). CVE-2018-5968 is the incomplete-blacklist deserialization RCE: pre-fix SubTypeValidator did not block the c3p0 polymorphic-deserialization gadgets com.mchange.v2.c3p0.JndiRefForwardingDataSource and WrapperConnectionPoolDataSource, letting an attacker with default typing enabled instantiate a gadget class and achieve RCE. The upstream fix (issue #1855, commit 2235894210, Tatu Saloranta) added those class names to the deser blacklist; issue #1931 (commit 6799f8f10) then refined it to a prefix rule that rejects ANY com.mchange.v2.c3p0.* class whose name ends in \"DataSource\". Version 2.8.11.1 is the upstream micro-release that shipped these fixes, and the target's SubTypeValidator.java contains the complete post-fix logic (PREFIX_C3P0 + endsWith(\"DataSource\") block at lines 103-113, plus the Spring AbstractPointcutAdvisor/AbstractApplicationContext hierarchy guard at lines 93-102). The guard is on the deserialization path: BeanDeserializerFactory.buildBeanDeserializer -> _validateSubType (line 866) -> SubTypeValidator.validateSubType. Both named CVE gadgets are caught by the prefix rule. The fix is upstream-authored (tatu.saloranta@iki.fi), not a TuxCare backport, so verdict is not_affected (vendor fix already baked into the shipped version), justification code_not_present. Not vulnerable. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-5968" }, "impact_statement": "not_affected \u2014 Target is jackson-databind at upstream release 2.8.11.1 (HEAD e5df4cd9, tuxcare-current/2.8.11.1). CVE-2018-5968 is the incomplete-blacklist deserialization RCE: pre-fix SubTypeValidator did not block the c3p0 polymorphic-deserialization gadgets com.mchange.v2.c3p0.JndiRefForwardingDataSource and WrapperConnectionPoolDataSource, letting an attacker with default typing enabled instantiate a gadget class and achieve RCE. The upstream fix (issue #1855, commit 2235894210, Tatu Saloranta) added those class names to the deser blacklist; issue #1931 (commit 6799f8f10) then refined it to a prefix rule that rejects ANY com.mchange.v2.c3p0.* class whose name ends in \"DataSource\". Version 2.8.11.1 is the upstream micro-release that shipped these fixes, and the target's SubTypeValidator.java contains the complete post-fix logic (PREFIX_C3P0 + endsWith(\"DataSource\") block at lines 103-113, plus the Spring AbstractPointcutAdvisor/AbstractApplicationContext hierarchy guard at lines 93-102). The guard is on the deserialization path: BeanDeserializerFactory.buildBeanDeserializer -> _validateSubType (line 866) -> SubTypeValidator.validateSubType. Both named CVE gadgets are caught by the prefix rule. The fix is upstream-authored (tatu.saloranta@iki.fi), not a TuxCare backport, so verdict is not_affected (vendor fix already baked into the shipped version), justification code_not_present. Not vulnerable. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-19032" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54515" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:56:18.481332+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.8.11.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.1-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability GHSA-wrr7-33fx-rcvj is a false positive for com.fasterxml.jackson.core:jackson-databind 2.8.11.1-tuxcare.1.", "vulnerability": { "name": "GHSA-wrr7-33fx-rcvj" }, "impact_statement": "The vulnerability has been withdrawn." } ] }