{
  "@id": "urn:uuid:774d4f5c-c709-47c1-9394-8d28bb70d9b0",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-19T20:17:00.096690+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-12086 does not affect version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. not_affected \u2014 fixed upstream before 2.9.9.3: CVE-2019-12086 fix dda513bd7251 by tatu.saloranta@iki.fi (2019-05-14) is an ancestor of tuxcare-current/2.9.9.3 (inside upstream tag jackson-databind-2.9.9.3); no TuxCare backport for this CVE on the branch \u2014 the CloudLinux commit VC credited is the onboarding merge (amoniatovskiy@cloudlinux.com, 2026-09-10). Manual re-label of VC verdict already_fixed\u2192not_affected after git verification, 2026-09-11.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-12086"
      },
      "impact_statement": "not_affected \u2014 fixed upstream before 2.9.9.3: CVE-2019-12086 fix dda513bd7251 by tatu.saloranta@iki.fi (2019-05-14) is an ancestor of tuxcare-current/2.9.9.3 (inside upstream tag jackson-databind-2.9.9.3); no TuxCare backport for this CVE on the branch \u2014 the CloudLinux commit VC credited is the onboarding merge (amoniatovskiy@cloudlinux.com, 2026-09-10). Manual re-label of VC verdict already_fixed\u2192not_affected after git verification, 2026-09-11."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-14540 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14540"
      },
      "action_statement": "Vulnerability CVE-2019-14540 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-14892 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14892"
      },
      "action_statement": "Vulnerability CVE-2019-14892 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-14893 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-14893"
      },
      "action_statement": "Vulnerability CVE-2019-14893 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-16335 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16335"
      },
      "action_statement": "Vulnerability CVE-2019-16335 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-16942 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16942"
      },
      "action_statement": "Vulnerability CVE-2019-16942 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-16943 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-16943"
      },
      "action_statement": "Vulnerability CVE-2019-16943 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-17267 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-17267"
      },
      "action_statement": "Vulnerability CVE-2019-17267 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-17531 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-17531"
      },
      "action_statement": "Vulnerability CVE-2019-17531 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2019-20330 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2019-20330"
      },
      "action_statement": "Vulnerability CVE-2019-20330 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-10650 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10650"
      },
      "action_statement": "Vulnerability CVE-2020-10650 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-10672 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10672"
      },
      "action_statement": "Vulnerability CVE-2020-10672 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-10673 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10673"
      },
      "action_statement": "Vulnerability CVE-2020-10673 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-10968 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10968"
      },
      "action_statement": "Vulnerability CVE-2020-10968 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-10969 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-10969"
      },
      "action_statement": "Vulnerability CVE-2020-10969 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-11111 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11111"
      },
      "action_statement": "Vulnerability CVE-2020-11111 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-11112 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11112"
      },
      "action_statement": "Vulnerability CVE-2020-11112 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-11113 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11113"
      },
      "action_statement": "Vulnerability CVE-2020-11113 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-11619 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11619"
      },
      "action_statement": "Vulnerability CVE-2020-11619 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-11620 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-11620"
      },
      "action_statement": "Vulnerability CVE-2020-11620 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-14060 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14060"
      },
      "action_statement": "Vulnerability CVE-2020-14060 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-14061 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14061"
      },
      "action_statement": "Vulnerability CVE-2020-14061 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-14062 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14062"
      },
      "action_statement": "Vulnerability CVE-2020-14062 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-14195 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-14195"
      },
      "action_statement": "Vulnerability CVE-2020-14195 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-24616 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-24616"
      },
      "action_statement": "Vulnerability CVE-2020-24616 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-24750 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-24750"
      },
      "action_statement": "Vulnerability CVE-2020-24750 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-25649"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-35490 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35490"
      },
      "action_statement": "Vulnerability CVE-2020-35490 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-35491 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35491"
      },
      "action_statement": "Vulnerability CVE-2020-35491 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-35728 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35728"
      },
      "action_statement": "Vulnerability CVE-2020-35728 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36179 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36179"
      },
      "action_statement": "Vulnerability CVE-2020-36179 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36180 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36180"
      },
      "action_statement": "Vulnerability CVE-2020-36180 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36181 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36181"
      },
      "action_statement": "Vulnerability CVE-2020-36181 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36182 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36182"
      },
      "action_statement": "Vulnerability CVE-2020-36182 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36183 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36183"
      },
      "action_statement": "Vulnerability CVE-2020-36183 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36184"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36185 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36185"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36186 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36186"
      },
      "action_statement": "Vulnerability CVE-2020-36186 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36187 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36187"
      },
      "action_statement": "Vulnerability CVE-2020-36187 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36188 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36188"
      },
      "action_statement": "Vulnerability CVE-2020-36188 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36189 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36189"
      },
      "action_statement": "Vulnerability CVE-2020-36189 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-36518 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36518"
      },
      "action_statement": "Vulnerability CVE-2020-36518 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-8840 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-8840"
      },
      "action_statement": "Vulnerability CVE-2020-8840 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-9546 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9546"
      },
      "action_statement": "Vulnerability CVE-2020-9546 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-9547 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9547"
      },
      "action_statement": "Vulnerability CVE-2020-9547 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2020-9548 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-9548"
      },
      "action_statement": "Vulnerability CVE-2020-9548 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2021-20190 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2021-20190"
      },
      "action_statement": "Vulnerability CVE-2021-20190 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2022-42003 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42003"
      },
      "action_statement": "Vulnerability CVE-2022-42003 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2022-42004 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42004"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2023-35116 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability",
      "vulnerability": {
        "name": "CVE-2023-35116"
      },
      "action_statement": "Vulnerability CVE-2023-35116 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind and will not be fixed. The maintainers classify this as a not a vulnerability, as it stems from stack overflows caused by serializing objects with cyclic dependencies, which is considered a misuse rather than a vulnerability"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:17:00.096690+00:00",
      "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-19032"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-50193 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-50193"
      },
      "action_statement": "Vulnerability CVE-2026-50193 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-54512 does not affect version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. Version 2.9.9.3 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV), which was introduced in version 2.10.0 (commit 1135b2c1d, issue #2195). Version 2.9.9.3 predates PTV entirely and uses a different security model (SubTypeValidator deny-list) that does not exhibit the vulnerable pattern. The CVE explicitly states the affected range is \"from 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\", confirming 2.9.9.3 is outside the vulnerable range.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-54512"
      },
      "impact_statement": "Version 2.9.9.3 is not affected by CVE-2026-54512. The vulnerability requires PolymorphicTypeValidator (PTV), which was introduced in version 2.10.0 (commit 1135b2c1d, issue #2195). Version 2.9.9.3 predates PTV entirely and uses a different security model (SubTypeValidator deny-list) that does not exhibit the vulnerable pattern. The CVE explicitly states the affected range is \"from 2.10.0 until 2.18.8, 2.21.4, and 3.1.4\", confirming 2.9.9.3 is outside the vulnerable range."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:17:00.096690+00:00",
      "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54514"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:17:00.096690+00:00",
      "status_notes": "Vulnerability CVE-2026-54515 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54515"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:17:00.096690+00:00",
      "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-59889"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-68497 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-68497"
      },
      "action_statement": "Vulnerability CVE-2026-68497 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-77310 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-77310"
      },
      "action_statement": "Vulnerability CVE-2026-77310 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-91776 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91776"
      },
      "action_statement": "Vulnerability CVE-2026-91776 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:16:00.120318+00:00",
      "status_notes": "Vulnerability CVE-2026-91777 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91777"
      },
      "action_statement": "Vulnerability CVE-2026-91777 affects version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:17:00.096690+00:00",
      "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.9.9.3-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "GHSA-mhm7-754m-9p8w"
      }
    }
  ]
}