{
  "@id": "urn:uuid:761cfb42-4f80-4e1d-9920-a4f03c8f36f0",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-19T20:19:00.944798+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-12086 does not affect version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Target version 2.9.9.1 already contains the upstream fix for CVE-2019-12086. The vulnerability affects jackson-databind versions before 2.9.9, and this target is version 2.9.9.1. The fix (blocking com.mysql.cj.jdbc.admin.MiniAdmin from polymorphic deserialization) is present in SubTypeValidator.java at line 84, added by upstream vendor FasterXML in commit dda513bd7 on May 14, 2019.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-12086"
      },
      "impact_statement": "Target version 2.9.9.1 already contains the upstream fix for CVE-2019-12086. The vulnerability affects jackson-databind versions before 2.9.9, and this target is version 2.9.9.1. The fix (blocking com.mysql.cj.jdbc.admin.MiniAdmin from polymorphic deserialization) is present in SubTypeValidator.java at line 84, added by upstream vendor FasterXML in commit dda513bd7 on May 14, 2019."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-12814 does not affect version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 fixed upstream before 2.9.9.1: CVE-2019-12814 fix 5f7c69bba07a by tatu.saloranta@iki.fi (2019-06-13) is an ancestor of tuxcare-current/2.9.9.1 (inside upstream tag jackson-databind-2.9.9.1); no TuxCare backport for this CVE on the branch \u2014 the CloudLinux commit VC credited is the onboarding merge (amoniatovskiy@cloudlinux.com, 2026-09-10). Manual re-label of VC verdict already_fixed\u2192not_affected after git verification, 2026-09-11.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-12814"
      },
      "impact_statement": "not_affected \u2014 fixed upstream before 2.9.9.1: CVE-2019-12814 fix 5f7c69bba07a by tatu.saloranta@iki.fi (2019-06-13) is an ancestor of tuxcare-current/2.9.9.1 (inside upstream tag jackson-databind-2.9.9.1); no TuxCare backport for this CVE on the branch \u2014 the CloudLinux commit VC credited is the onboarding merge (amoniatovskiy@cloudlinux.com, 2026-09-10). Manual re-label of VC verdict already_fixed\u2192not_affected after git verification, 2026-09-11."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-14379 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14379"
      },
      "action_statement": "Vulnerability CVE-2019-14379 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-14439 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14439"
      },
      "action_statement": "Vulnerability CVE-2019-14439 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-14540 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14540"
      },
      "action_statement": "Vulnerability CVE-2019-14540 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-14892 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14892"
      },
      "action_statement": "Vulnerability CVE-2019-14892 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-14893 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14893"
      },
      "action_statement": "Vulnerability CVE-2019-14893 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-16335 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16335"
      },
      "action_statement": "Vulnerability CVE-2019-16335 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-16942 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16942"
      },
      "action_statement": "Vulnerability CVE-2019-16942 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-16943 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16943"
      },
      "action_statement": "Vulnerability CVE-2019-16943 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-17267 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-17267"
      },
      "action_statement": "Vulnerability CVE-2019-17267 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-17531 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-17531"
      },
      "action_statement": "Vulnerability CVE-2019-17531 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2019-20330 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-20330"
      },
      "action_statement": "Vulnerability CVE-2019-20330 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-10650 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10650"
      },
      "action_statement": "Vulnerability CVE-2020-10650 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-10672 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10672"
      },
      "action_statement": "Vulnerability CVE-2020-10672 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-10673 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10673"
      },
      "action_statement": "Vulnerability CVE-2020-10673 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-10968 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10968"
      },
      "action_statement": "Vulnerability CVE-2020-10968 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-10969 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10969"
      },
      "action_statement": "Vulnerability CVE-2020-10969 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-11111 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11111"
      },
      "action_statement": "Vulnerability CVE-2020-11111 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-11112 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11112"
      },
      "action_statement": "Vulnerability CVE-2020-11112 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-11113 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11113"
      },
      "action_statement": "Vulnerability CVE-2020-11113 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-11619 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11619"
      },
      "action_statement": "Vulnerability CVE-2020-11619 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-11620 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11620"
      },
      "action_statement": "Vulnerability CVE-2020-11620 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-14060 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14060"
      },
      "action_statement": "Vulnerability CVE-2020-14060 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-14061 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14061"
      },
      "action_statement": "Vulnerability CVE-2020-14061 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-14062 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14062"
      },
      "action_statement": "Vulnerability CVE-2020-14062 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-14195 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14195"
      },
      "action_statement": "Vulnerability CVE-2020-14195 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-24616 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-24616"
      },
      "action_statement": "Vulnerability CVE-2020-24616 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-24750 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-24750"
      },
      "action_statement": "Vulnerability CVE-2020-24750 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-25649"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-35490 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35490"
      },
      "action_statement": "Vulnerability CVE-2020-35490 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-35491 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35491"
      },
      "action_statement": "Vulnerability CVE-2020-35491 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-35728 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35728"
      },
      "action_statement": "Vulnerability CVE-2020-35728 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36179 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36179"
      },
      "action_statement": "Vulnerability CVE-2020-36179 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36180 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36180"
      },
      "action_statement": "Vulnerability CVE-2020-36180 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36181 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36181"
      },
      "action_statement": "Vulnerability CVE-2020-36181 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36182 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36182"
      },
      "action_statement": "Vulnerability CVE-2020-36182 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36183 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36183"
      },
      "action_statement": "Vulnerability CVE-2020-36183 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36184"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36185 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36185"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36186 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36186"
      },
      "action_statement": "Vulnerability CVE-2020-36186 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36187 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36187"
      },
      "action_statement": "Vulnerability CVE-2020-36187 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36188 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36188"
      },
      "action_statement": "Vulnerability CVE-2020-36188 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36189 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36189"
      },
      "action_statement": "Vulnerability CVE-2020-36189 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-36518 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36518"
      },
      "action_statement": "Vulnerability CVE-2020-36518 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-8840 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-8840"
      },
      "action_statement": "Vulnerability CVE-2020-8840 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-9546 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9546"
      },
      "action_statement": "Vulnerability CVE-2020-9546 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-9547 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9547"
      },
      "action_statement": "Vulnerability CVE-2020-9547 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2020-9548 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9548"
      },
      "action_statement": "Vulnerability CVE-2020-9548 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2021-20190 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2021-20190"
      },
      "action_statement": "Vulnerability CVE-2021-20190 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2022-42003 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42003"
      },
      "action_statement": "Vulnerability CVE-2022-42003 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42004"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2023-35116 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2023-35116"
      },
      "action_statement": "Vulnerability CVE-2023-35116 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-19032"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-50193 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-50193"
      },
      "action_statement": "Vulnerability CVE-2026-50193 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2026-54512 describes a vulnerability in jackson-databind's PolymorphicTypeValidator (PTV) where generic type parameters bypass validation during type resolution. Version 2.9.9.1 is not affected because it predates PTV entirely\u2014PTV was introduced in 2.10.0. The 2.9.9.1 source tree contains no PolymorphicTypeValidator, no BasicPolymorphicTypeValidator and no DatabindContext._resolveAndValidateGeneric(); the jsontype package holds only SubTypeValidator, a fixed deny-list of known gadget class names applied in BeanDeserializerFactory.createBeanDeserializer(). The reported attack consists of smuggling a class past a caller-configured PTV allow-list as a generic type argument, and no such allow-list mechanism exists in this version for the type identifier to evade.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-54512"
      },
      "impact_statement": "CVE-2026-54512 describes a vulnerability in jackson-databind's PolymorphicTypeValidator (PTV) where generic type parameters bypass validation during type resolution. Version 2.9.9.1 is not affected because it predates PTV entirely\u2014PTV was introduced in 2.10.0. The 2.9.9.1 source tree contains no PolymorphicTypeValidator, no BasicPolymorphicTypeValidator and no DatabindContext._resolveAndValidateGeneric(); the jsontype package holds only SubTypeValidator, a fixed deny-list of known gadget class names applied in BeanDeserializerFactory.createBeanDeserializer(). The reported attack consists of smuggling a class past a caller-configured PTV allow-list as a generic type argument, and no such allow-list mechanism exists in this version for the type identifier to evade."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54514"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54515"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-59889"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-68497 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-68497"
      },
      "action_statement": "Vulnerability CVE-2026-68497 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-77310 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-77310"
      },
      "action_statement": "Vulnerability CVE-2026-77310 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-91776 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91776"
      },
      "action_statement": "Vulnerability CVE-2026-91776 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:18:00.107592+00:00",
      "status_notes": "Vulnerability CVE-2026-91777 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91777"
      },
      "action_statement": "Vulnerability CVE-2026-91777 affects version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.1-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.9.9.1-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "GHSA-mhm7-754m-9p8w"
      }
    }
  ]
}