{ "@id": "urn:uuid:4fa0c3e7-3904-4c7b-8c29-3ea30e285708", "role": "Document Creator", "author": "https://tuxcare.com", "version": 1, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-20T15:59:00.141399+00:00", "statements": [ { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2017-15095 does not affect version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is jackson-databind 2.8.11.4 (com.fasterxml.jackson.core:jackson-databind) \u2014 the exact product of the advisory (product-identity match; not false_positive). CVE-2017-15095 (issue #1737) extends CVE-2017-7525 by blacklisting more polymorphic-deserialization gadget classes. The fix lives in SubTypeValidator.DEFAULT_NO_DESER_CLASS_NAMES plus the Spring/c3p0 class-hierarchy checks in validateSubType(). All six #1737 gadget classes are blocked in the target: java.util.logging.FileHandler (line 46) and java.rmi.server.UnicastRemoteObject (line 47) by exact name; org.springframework.beans.factory.config.PropertyPathFactoryBean (line 50) by exact name; org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor via the Spring superclass walk matching \"AbstractPointcutAdvisor\" (lines 134-143); and com.mchange.v2.c3p0.JndiRefForwardingDataSource + WrapperConnectionPoolDataSource via the c3p0-prefix + endsWith(\"DataSource\") check (lines 144-153). validateSubType() is wired into the deserialization path (BeanDeserializerFactory._validateSubType at line 866, called from createBeanDeserializer at line 142), so listed types throw JsonMappingException instead of being instantiated. The defense was authored entirely upstream (Fix #1737 commit e865a7a4 by Andrew Tolbert @datastax.com, refined by #1855/#1931 by Tatu Saloranta @iki.fi); no TuxCare/CloudLinux author touched the file. Because the upstream fix is already baked into the shipped 2.8.11.4 version, the vulnerable pattern is not present in HEAD \u2192 not_affected (code_not_present). [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-15095" }, "impact_statement": "not_affected \u2014 Target is jackson-databind 2.8.11.4 (com.fasterxml.jackson.core:jackson-databind) \u2014 the exact product of the advisory (product-identity match; not false_positive). CVE-2017-15095 (issue #1737) extends CVE-2017-7525 by blacklisting more polymorphic-deserialization gadget classes. The fix lives in SubTypeValidator.DEFAULT_NO_DESER_CLASS_NAMES plus the Spring/c3p0 class-hierarchy checks in validateSubType(). All six #1737 gadget classes are blocked in the target: java.util.logging.FileHandler (line 46) and java.rmi.server.UnicastRemoteObject (line 47) by exact name; org.springframework.beans.factory.config.PropertyPathFactoryBean (line 50) by exact name; org.springframework.aop.support.AbstractBeanFactoryPointcutAdvisor via the Spring superclass walk matching \"AbstractPointcutAdvisor\" (lines 134-143); and com.mchange.v2.c3p0.JndiRefForwardingDataSource + WrapperConnectionPoolDataSource via the c3p0-prefix + endsWith(\"DataSource\") check (lines 144-153). validateSubType() is wired into the deserialization path (BeanDeserializerFactory._validateSubType at line 866, called from createBeanDeserializer at line 142), so listed types throw JsonMappingException instead of being instantiated. The defense was authored entirely upstream (Fix #1737 commit e865a7a4 by Andrew Tolbert @datastax.com, refined by #1855/#1931 by Tatu Saloranta @iki.fi); no TuxCare/CloudLinux author touched the file. Because the upstream fix is already baked into the shipped 2.8.11.4 version, the vulnerable pattern is not present in HEAD \u2192 not_affected (code_not_present). [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-23; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2017-17485 does not affect version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2017-17485 is not present in jackson-databind 2.8.11.4. The upstream vendor (FasterXML) fixed this vulnerability in version 2.8.11 (Dec 2017) by adding blacklist entries for dangerous classes and creating the SubTypeValidator with pattern-based Spring class blocking. The target version 2.8.11.4 includes all these fixes. The vulnerable code patterns (incomplete blacklist allowing RCE via Spring/JDK/C3P0/Tomcat gadget classes) are not present.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2017-17485" }, "impact_statement": "CVE-2017-17485 is not present in jackson-databind 2.8.11.4. The upstream vendor (FasterXML) fixed this vulnerability in version 2.8.11 (Dec 2017) by adding blacklist entries for dangerous classes and creating the SubTypeValidator with pattern-based Spring class blocking. The target version 2.8.11.4 includes all these fixes. The vulnerable code patterns (incomplete blacklist allowing RCE via Spring/JDK/C3P0/Tomcat gadget classes) are not present." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2018-5968 does not affect version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 Target is jackson-databind 2.8.11.4 (TuxCare ELS). CVE-2018-5968 (databind#1899) is an incomplete-blacklist deserialization RCE: two gadget classes \u2014 org.hibernate.jmx.StatisticsService and org.apache.ibatis.datasource.jndi.JndiDataSourceFactory \u2014 bypassed the default-typing deny-list. The vendor fix adds both to DEFAULT_NO_DESER_CLASS_NAMES in SubTypeValidator.java. In the target, both entries are already present (lines 58-59 and again 70-71), and the deny-list is live: validateSubType is invoked on the deserialization path via BeanDeserializerFactory._validateSubType (line 866). git blame shows the entries were authored by upstream FasterXML (038b471e2e by Tatu Saloranta 2018-01-21; 454be8bb8c by MaximilianTews 2018-06-26) \u2014 the exact patch commits given as input \u2014 not by TuxCare. Version 2.8.11.4 (> vulnerable 2.8.11) shipped with the upstream fix already baked in; no vulnerable pattern exists in HEAD. Verdict: not_affected (upstream/vendor-fix sub-case), justification code_not_present. Attribution: no TuxCare signal (fix author domain iki.fi; fix entered via wholesale onboard/2.8.11.4 version-import, not a targeted backport MR), so fixing_commit_author is the upstream fix-commit author. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2018-5968" }, "impact_statement": "not_affected \u2014 Target is jackson-databind 2.8.11.4 (TuxCare ELS). CVE-2018-5968 (databind#1899) is an incomplete-blacklist deserialization RCE: two gadget classes \u2014 org.hibernate.jmx.StatisticsService and org.apache.ibatis.datasource.jndi.JndiDataSourceFactory \u2014 bypassed the default-typing deny-list. The vendor fix adds both to DEFAULT_NO_DESER_CLASS_NAMES in SubTypeValidator.java. In the target, both entries are already present (lines 58-59 and again 70-71), and the deny-list is live: validateSubType is invoked on the deserialization path via BeanDeserializerFactory._validateSubType (line 866). git blame shows the entries were authored by upstream FasterXML (038b471e2e by Tatu Saloranta 2018-01-21; 454be8bb8c by MaximilianTews 2018-06-26) \u2014 the exact patch commits given as input \u2014 not by TuxCare. Version 2.8.11.4 (> vulnerable 2.8.11) shipped with the upstream fix already baked in; no vulnerable pattern exists in HEAD. Verdict: not_affected (upstream/vendor-fix sub-case), justification code_not_present. Attribution: no TuxCare signal (fix author domain iki.fi; fix entered via wholesale onboard/2.8.11.4 version-import, not a targeted backport MR), so fixing_commit_author is the upstream fix-commit author. [VC re-run with claude-opus-4-8, prod pin d46bd7a, 2026-09-21; the earlier Sonnet run was parked by the author-verification gate after crediting a TuxCare backport for an upstream fix]" }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-14540 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14540" }, "action_statement": "Vulnerability CVE-2019-14540 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-14892 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14892" }, "action_statement": "Vulnerability CVE-2019-14892 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-14893 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-14893" }, "action_statement": "Vulnerability CVE-2019-14893 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-16335 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16335" }, "action_statement": "Vulnerability CVE-2019-16335 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-16942 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16942" }, "action_statement": "Vulnerability CVE-2019-16942 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-16943 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-16943" }, "action_statement": "Vulnerability CVE-2019-16943 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-17267 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17267" }, "action_statement": "Vulnerability CVE-2019-17267 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-17531 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-17531" }, "action_statement": "Vulnerability CVE-2019-17531 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2019-20330 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2019-20330" }, "action_statement": "Vulnerability CVE-2019-20330 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-10650 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10650" }, "action_statement": "Vulnerability CVE-2020-10650 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-10672 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10672" }, "action_statement": "Vulnerability CVE-2020-10672 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-10673 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10673" }, "action_statement": "Vulnerability CVE-2020-10673 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-10968 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10968" }, "action_statement": "Vulnerability CVE-2020-10968 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-10969 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-10969" }, "action_statement": "Vulnerability CVE-2020-10969 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-11111 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11111" }, "action_statement": "Vulnerability CVE-2020-11111 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-11112 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11112" }, "action_statement": "Vulnerability CVE-2020-11112 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-11113 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11113" }, "action_statement": "Vulnerability CVE-2020-11113 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-11619 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11619" }, "action_statement": "Vulnerability CVE-2020-11619 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-11620 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-11620" }, "action_statement": "Vulnerability CVE-2020-11620 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-14060 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14060" }, "action_statement": "Vulnerability CVE-2020-14060 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-14061 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14061" }, "action_statement": "Vulnerability CVE-2020-14061 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-14062 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14062" }, "action_statement": "Vulnerability CVE-2020-14062 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-14195 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-14195" }, "action_statement": "Vulnerability CVE-2020-14195 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-24616 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24616" }, "action_statement": "Vulnerability CVE-2020-24616 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-24750 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-24750" }, "action_statement": "Vulnerability CVE-2020-24750 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-25649" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-35490 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35490" }, "action_statement": "Vulnerability CVE-2020-35490 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-35491 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35491" }, "action_statement": "Vulnerability CVE-2020-35491 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-35728 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-35728" }, "action_statement": "Vulnerability CVE-2020-35728 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36179 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36179" }, "action_statement": "Vulnerability CVE-2020-36179 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36180 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36180" }, "action_statement": "Vulnerability CVE-2020-36180 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36181 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36181" }, "action_statement": "Vulnerability CVE-2020-36181 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36182 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36182" }, "action_statement": "Vulnerability CVE-2020-36182 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36183 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36183" }, "action_statement": "Vulnerability CVE-2020-36183 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36184" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36185 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36185" }, "action_statement": "Vulnerability CVE-2020-36185 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36186 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36186" }, "action_statement": "Vulnerability CVE-2020-36186 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36187 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36187" }, "action_statement": "Vulnerability CVE-2020-36187 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36188 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36188" }, "action_statement": "Vulnerability CVE-2020-36188 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36189 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36189" }, "action_statement": "Vulnerability CVE-2020-36189 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-36518 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-36518" }, "action_statement": "Vulnerability CVE-2020-36518 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-8840 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-8840" }, "action_statement": "Vulnerability CVE-2020-8840 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-9546 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9546" }, "action_statement": "Vulnerability CVE-2020-9546 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-9547 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9547" }, "action_statement": "Vulnerability CVE-2020-9547 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2020-9548 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2020-9548" }, "action_statement": "Vulnerability CVE-2020-9548 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2021-20190 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2021-20190" }, "action_statement": "Vulnerability CVE-2021-20190 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2022-42003 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42003" }, "action_statement": "Vulnerability CVE-2022-42003 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2022-42004" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2023-35116 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2023-35116" }, "action_statement": "Vulnerability CVE-2023-35116 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-19032" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-50193 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-50193" }, "action_statement": "Vulnerability CVE-2026-50193 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-54512 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54512" }, "action_statement": "Vulnerability CVE-2026-54512 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54514" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-54515" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-59889" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-68497 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-68497" }, "action_statement": "Vulnerability CVE-2026-68497 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-77310 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-77310" }, "action_statement": "Vulnerability CVE-2026-77310 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-91776 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91776" }, "action_statement": "Vulnerability CVE-2026-91776 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability CVE-2026-91777 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "CVE-2026-91777" }, "action_statement": "Vulnerability CVE-2026-91777 affects version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.8.11.4-tuxcare.1" } } ], "timestamp": "2026-10-20T15:59:00.141399+00:00", "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.8.11.4-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.", "vulnerability": { "name": "GHSA-mhm7-754m-9p8w" } } ] }