{ "@id": "urn:uuid:eb8d46e2-4e32-4696-9a9a-299aae189a5c", "role": "Document Creator", "author": "https://tuxcare.com", "version": 1, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-20T15:55:08.001509+00:00", "statements": [ { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2017-15095 does not affect version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is com.fasterxml.jackson.core:jackson-databind 2.8.11.3 \u2014 the CVE's affected product (not false_positive). CVE-2017-15095 extended CVE-2017-7525 by blacklisting additional polymorphic-deserialization gadget classes. The upstream fix landed in 2.8.11; the target (2.8.11.3) is built on that base and already contains the fix. SubTypeValidator.DEFAULT_NO_DESER_CLASS_NAMES holds the exact CVE-2017-15095 additions: com.sun.rowset.JdbcRowSetImpl (#1680, line 44), java.util.logging.FileHandler + java.rmi.server.UnicastRemoteObject (#1737, lines 46-47), org.springframework.beans.factory.config.PropertyPathFactoryBean (#1737, line 50). The Spring AbstractPointcutAdvisor/AbstractApplicationContext superclass checks (lines 121-123) and c3p0 endsWith(\"DataSource\") check (line 134) generalize (and exceed) the original individual #1737 entries. The defense is reachable during deserialization: BeanDeserializerFactory:142 -> _validateSubType:866 -> SubTypeValidator.validateSubType:99 throws JsonMappingException for any type whose fully-qualified name is in the deny-set, before the deserializer/instance is built. git blame attributes all these lines to upstream maintainer Tatu Saloranta (commit 2235894210, 2017-12-18 \u2014 the upstream 2.8.11 fix date), merged via upstream 2.6->2.7->2.8 branch merges. No CloudLinux/TuxCare author touched them. Verdict: not_affected (upstream vendor fix already present in the shipped version); justification code_not_present. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-15095" }, "impact_statement": "not_affected \u2014 Target is com.fasterxml.jackson.core:jackson-databind 2.8.11.3 \u2014 the CVE's affected product (not false_positive). CVE-2017-15095 extended CVE-2017-7525 by blacklisting additional polymorphic-deserialization gadget classes. The upstream fix landed in 2.8.11; the target (2.8.11.3) is built on that base and already contains the fix. SubTypeValidator.DEFAULT_NO_DESER_CLASS_NAMES holds the exact CVE-2017-15095 additions: com.sun.rowset.JdbcRowSetImpl (#1680, line 44), java.util.logging.FileHandler + java.rmi.server.UnicastRemoteObject (#1737, lines 46-47), org.springframework.beans.factory.config.PropertyPathFactoryBean (#1737, line 50). The Spring AbstractPointcutAdvisor/AbstractApplicationContext superclass checks (lines 121-123) and c3p0 endsWith(\"DataSource\") check (line 134) generalize (and exceed) the original individual #1737 entries. The defense is reachable during deserialization: BeanDeserializerFactory:142 -> _validateSubType:866 -> SubTypeValidator.validateSubType:99 throws JsonMappingException for any type whose fully-qualified name is in the deny-set, before the deserializer/instance is built. git blame attributes all these lines to upstream maintainer Tatu Saloranta (commit 2235894210, 2017-12-18 \u2014 the upstream 2.8.11 fix date), merged via upstream 2.6->2.7->2.8 branch merges. No CloudLinux/TuxCare author touched them. Verdict: not_affected (upstream vendor fix already present in the shipped version); justification code_not_present. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2017-17485 does not affect version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is jackson-databind 2.8.11.3 (product-identity match with the CVE's affected product). CVE-2017-17485 is the incomplete-fix bypass of CVE-2017-7525's polymorphic-deserialization blacklist, exploitable via Spring gadget classes (org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor and org.springframework.beans.factory.config.PropertyPathFactoryBean) that slipped past the earlier deny-list. The upstream fix (jackson-databind issue #1855) hardens SubTypeValidator's deny-list. The target's src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java already contains the complete fix: PropertyPathFactoryBean is on the explicit deny-list (line 50), and AbstractBeanFactoryPointcutAdvisor is blocked by the superclass-walking check (lines 117-126) that rejects any org.springframework.* class whose ancestor is AbstractPointcutAdvisor or AbstractApplicationContext (this robust check \"deprecated\" the plain literal entry per the line 49 comment). The fix was authored upstream by Tatu Saloranta (tatu.saloranta@iki.fi) in commit 2235894210 \"Fix #1855\" (2017-12-18, one of the task's patch commits) and shipped in the upstream 2.8.11 release. The pre-fix vulnerable pattern is therefore not present in HEAD. Verdict: not_affected (upstream fix baked into the shipped version); justification code_not_present. This is an upstream fix, not a TuxCare/CloudLinux backport, so it is not \"already_fixed\". [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-17485" }, "impact_statement": "not_affected \u2014 Target is jackson-databind 2.8.11.3 (product-identity match with the CVE's affected product). CVE-2017-17485 is the incomplete-fix bypass of CVE-2017-7525's polymorphic-deserialization blacklist, exploitable via Spring gadget classes (org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor and org.springframework.beans.factory.config.PropertyPathFactoryBean) that slipped past the earlier deny-list. The upstream fix (jackson-databind issue #1855) hardens SubTypeValidator's deny-list. The target's src/main/java/com/fasterxml/jackson/databind/jsontype/impl/SubTypeValidator.java already contains the complete fix: PropertyPathFactoryBean is on the explicit deny-list (line 50), and AbstractBeanFactoryPointcutAdvisor is blocked by the superclass-walking check (lines 117-126) that rejects any org.springframework.* class whose ancestor is AbstractPointcutAdvisor or AbstractApplicationContext (this robust check \"deprecated\" the plain literal entry per the line 49 comment). The fix was authored upstream by Tatu Saloranta (tatu.saloranta@iki.fi) in commit 2235894210 \"Fix #1855\" (2017-12-18, one of the task's patch commits) and shipped in the upstream 2.8.11 release. The pre-fix vulnerable pattern is therefore not present in HEAD. Verdict: not_affected (upstream fix baked into the shipped version); justification code_not_present. This is an upstream fix, not a TuxCare/CloudLinux backport, so it is not \"already_fixed\". [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2018-5968 does not affect version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target jackson-databind 2.8.11.3 (HEAD 9f40b11aa) is NOT affected by CVE-2018-5968. The CVE's fix (jackson issue #1899) simply adds two deserialization gadget class names to the DEFAULT_NO_DESER_CLASS_NAMES deny-list in SubTypeValidator.java. Both names are already present in the target: \"org.hibernate.jmx.StatisticsService\" and \"org.apache.ibatis.datasource.jndi.JndiDataSourceFactory\" (lines 58-59, redundantly re-added at 70-71). validateSubType() rejects any type whose raw FQCN is in that set (exact-match at line 108) by throwing JsonMappingException at line 141, before the bean is built. This check sits on the polymorphic/default-typing deserialization path (BeanDeserializerFactory.createBeanDeserializer -> _validateSubType (line 142) -> SubTypeValidator.validateSubType (line 866), invoked before buildBeanDeserializer). The fix is UPSTREAM-authored: line 57-59 come from commit 038b471e (Tatu Saloranta, upstream lead, tatu.saloranta@iki.fi, 2018-01-21) and the duplicate 69-71 from 454be8bb (MaximilianTews, committed by Tatu Saloranta, 2018-06-26) - both are the exact vendor patch commits, both predate the CloudLinux onboarding commit (a98464c16, amoniatovskiy@cloudlinux.com, 2026). No @cloudlinux.com/@tuxcare.com author ever touched this file, so this is a vendor-already-fixed case, not a TuxCare backport. Verdict: not_affected / code_not_present. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-5968" }, "impact_statement": "not_affected \u2014 Target jackson-databind 2.8.11.3 (HEAD 9f40b11aa) is NOT affected by CVE-2018-5968. The CVE's fix (jackson issue #1899) simply adds two deserialization gadget class names to the DEFAULT_NO_DESER_CLASS_NAMES deny-list in SubTypeValidator.java. Both names are already present in the target: \"org.hibernate.jmx.StatisticsService\" and \"org.apache.ibatis.datasource.jndi.JndiDataSourceFactory\" (lines 58-59, redundantly re-added at 70-71). validateSubType() rejects any type whose raw FQCN is in that set (exact-match at line 108) by throwing JsonMappingException at line 141, before the bean is built. This check sits on the polymorphic/default-typing deserialization path (BeanDeserializerFactory.createBeanDeserializer -> _validateSubType (line 142) -> SubTypeValidator.validateSubType (line 866), invoked before buildBeanDeserializer). The fix is UPSTREAM-authored: line 57-59 come from commit 038b471e (Tatu Saloranta, upstream lead, tatu.saloranta@iki.fi, 2018-01-21) and the duplicate 69-71 from 454be8bb (MaximilianTews, committed by Tatu Saloranta, 2018-06-26) - both are the exact vendor patch commits, both predate the CloudLinux onboarding commit (a98464c16, amoniatovskiy@cloudlinux.com, 2026). No @cloudlinux.com/@tuxcare.com author ever touched this file, so this is a vendor-already-fixed case, not a TuxCare backport. Verdict: not_affected / code_not_present. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12086 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12086" }, "action_statement": "Vulnerability CVE-2019-12086 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12384 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12384" }, "action_statement": "Vulnerability CVE-2019-12384 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-12814 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-12814" }, "action_statement": "Vulnerability CVE-2019-12814 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14379 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14379" }, "action_statement": "Vulnerability CVE-2019-14379 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14439 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14439" }, "action_statement": "Vulnerability CVE-2019-14439 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-19032" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54515" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.3-tuxcare.1" } } ], "timestamp": "2026-10-20T15:55:08.001509+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.8.11.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } } ] }