{
  "@id": "urn:uuid:f04dfb9a-f9a5-4ce3-8ce7-d2f1479e0d80",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 7,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-27T09:58:59.407356+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:49:00.073491+00:00",
      "status_notes": "Vulnerability CVE-2019-14540 does not affect version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2019-14540 affects jackson-databind versions before 2.9.10. The target is at version 2.9.10.6-tuxcare.1, which includes the upstream fix from version 2.9.10. The vulnerability involved polymorphic typing allowing deserialization of dangerous classes (com.zaxxer.hikari.HikariConfig and HikariDataSource). The fix blacklists these classes in SubTypeValidator.java (lines 104-107), preventing their deserialization. The fix was authored by upstream maintainer Tatu Saloranta (tatu.saloranta@iki.fi) in commit d4983c740fec7d5576b207a8c30a63d3ea7443de, which was included in the jackson-databind-2.9.10 release tag. TuxCare onboarded version 2.9.10.6 which already contained this fix from upstream.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-14540"
      },
      "impact_statement": "CVE-2019-14540 affects jackson-databind versions before 2.9.10. The target is at version 2.9.10.6-tuxcare.1, which includes the upstream fix from version 2.9.10. The vulnerability involved polymorphic typing allowing deserialization of dangerous classes (com.zaxxer.hikari.HikariConfig and HikariDataSource). The fix blacklists these classes in SubTypeValidator.java (lines 104-107), preventing their deserialization. The fix was authored by upstream maintainer Tatu Saloranta (tatu.saloranta@iki.fi) in commit d4983c740fec7d5576b207a8c30a63d3ea7443de, which was included in the jackson-databind-2.9.10 release tag. TuxCare onboarded version 2.9.10.6 which already contained this fix from upstream."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:51:33.391408+00:00",
      "status_notes": "Vulnerability CVE-2019-14892 does not affect version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2019-14892 is NOT present in jackson-databind 2.9.10.6. The vulnerability allows polymorphic deserialization of malicious objects using commons-configuration JNDI classes for arbitrary code execution. The fix (adding blocklist entries for org.apache.commons.configuration.JNDIConfiguration and org.apache.commons.configuration2.JNDIConfiguration to SubTypeValidator.java) was already present in upstream jackson-databind 2.9.10, which TuxCare onboarded. The CVE affects versions before 2.9.10, 2.8.11.5, and 2.6.7.3. The target version 2.9.10.6 contains the upstream fix from commit 41b7f9b90149e9d44a65a8261a8deedc7186f6af by Tatu Saloranta, which predates the first TuxCare commit (a627dc2c027b03196ab96914a6770080fbe0331b \"Onboard version 2.9.10.6\").",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-14892"
      },
      "impact_statement": "CVE-2019-14892 is NOT present in jackson-databind 2.9.10.6. The vulnerability allows polymorphic deserialization of malicious objects using commons-configuration JNDI classes for arbitrary code execution. The fix (adding blocklist entries for org.apache.commons.configuration.JNDIConfiguration and org.apache.commons.configuration2.JNDIConfiguration to SubTypeValidator.java) was already present in upstream jackson-databind 2.9.10, which TuxCare onboarded. The CVE affects versions before 2.9.10, 2.8.11.5, and 2.6.7.3. The target version 2.9.10.6 contains the upstream fix from commit 41b7f9b90149e9d44a65a8261a8deedc7186f6af by Tatu Saloranta, which predates the first TuxCare commit (a627dc2c027b03196ab96914a6770080fbe0331b \"Onboard version 2.9.10.6\")."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:51:33.391408+00:00",
      "status_notes": "Vulnerability CVE-2019-14893 does not affect version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2019-14893 is not present in jackson-databind 2.9.10.6. The vulnerability allowed polymorphic deserialization of malicious objects using the xalan JNDI gadget (org.apache.xalan.lib.sql.JNDIConnectionPool). The fix, which adds this class to the deserialization blacklist in SubTypeValidator.java, was already included in the upstream jackson-databind 2.9.10.6 release. Commit 998efd708 by Tatu Saloranta (upstream maintainer) added the protection before TuxCare's onboarding of this version.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-14893"
      },
      "impact_statement": "CVE-2019-14893 is not present in jackson-databind 2.9.10.6. The vulnerability allowed polymorphic deserialization of malicious objects using the xalan JNDI gadget (org.apache.xalan.lib.sql.JNDIConnectionPool). The fix, which adds this class to the deserialization blacklist in SubTypeValidator.java, was already included in the upstream jackson-databind 2.9.10.6 release. Commit 998efd708 by Tatu Saloranta (upstream maintainer) added the protection before TuxCare's onboarding of this version."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T08:49:00.073491+00:00",
      "status_notes": "Vulnerability CVE-2019-16335 does not affect version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2019-16335 concerns a polymorphic deserialization vulnerability in jackson-databind related to com.zaxxer.hikari.HikariDataSource. The target repository (jackson-databind version 2.9.10.6-tuxcare.1) is not affected because the fix was already present in the upstream version 2.9.10.6 before TuxCare onboarded it. The blocklist entry for HikariDataSource exists at line 107 of SubTypeValidator.java, added by upstream commit 73c1c2cc7 authored by Tatu Saloranta (the upstream FasterXML maintainer).",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-16335"
      },
      "impact_statement": "CVE-2019-16335 concerns a polymorphic deserialization vulnerability in jackson-databind related to com.zaxxer.hikari.HikariDataSource. The target repository (jackson-databind version 2.9.10.6-tuxcare.1) is not affected because the fix was already present in the upstream version 2.9.10.6 before TuxCare onboarded it. The blocklist entry for HikariDataSource exists at line 107 of SubTypeValidator.java, added by upstream commit 73c1c2cc7 authored by Tatu Saloranta (the upstream FasterXML maintainer)."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T09:58:59.407356+00:00",
      "status_notes": "Vulnerability CVE-2019-17267 does not affect version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind. CVE-2019-17267 is not present in jackson-databind 2.9.10.6. The vulnerability affects versions before 2.9.10 and involves missing blocklist entry for net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup in polymorphic deserialization. The fix (commit 191a4cdf8) was authored by upstream maintainer Tatu Saloranta and shipped in the upstream 2.9.10 release, which TuxCare later onboarded. The target version 2.9.10.6 includes this fix at SubTypeValidator.java line 99.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2019-17267"
      },
      "impact_statement": "CVE-2019-17267 is not present in jackson-databind 2.9.10.6. The vulnerability affects versions before 2.9.10 and involves missing blocklist entry for net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup in polymorphic deserialization. The fix (commit 191a4cdf8) was authored by upstream maintainer Tatu Saloranta and shipped in the upstream 2.9.10 release, which TuxCare later onboarded. The target version 2.9.10.6 includes this fix at SubTypeValidator.java line 99."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2020-25649 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-25649"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-35490 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35490"
      },
      "action_statement": "Vulnerability CVE-2020-35490 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-35491 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35491"
      },
      "action_statement": "Vulnerability CVE-2020-35491 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-35728 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-35728"
      },
      "action_statement": "Vulnerability CVE-2020-35728 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36179 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36179"
      },
      "action_statement": "Vulnerability CVE-2020-36179 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36180 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36180"
      },
      "action_statement": "Vulnerability CVE-2020-36180 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36181 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36181"
      },
      "action_statement": "Vulnerability CVE-2020-36181 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36182 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36182"
      },
      "action_statement": "Vulnerability CVE-2020-36182 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36183 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36183"
      },
      "action_statement": "Vulnerability CVE-2020-36183 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T07:06:00.167611+00:00",
      "status_notes": "Vulnerability CVE-2020-36184 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36184"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2020-36185 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36185"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36186 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36186"
      },
      "action_statement": "Vulnerability CVE-2020-36186 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36187 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36187"
      },
      "action_statement": "Vulnerability CVE-2020-36187 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36188 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36188"
      },
      "action_statement": "Vulnerability CVE-2020-36188 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36189 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36189"
      },
      "action_statement": "Vulnerability CVE-2020-36189 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2020-36518 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2020-36518"
      },
      "action_statement": "Vulnerability CVE-2020-36518 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2021-20190 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2021-20190"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2022-42003 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42003"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2022-42004 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2022-42004"
      },
      "action_statement": "Vulnerability CVE-2022-42004 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2026-19032 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-19032"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability CVE-2026-50193 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-50193"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54512 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54512"
      },
      "action_statement": "Vulnerability CVE-2026-54512 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54514 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54514"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-54515 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-54515"
      },
      "action_statement": "Vulnerability CVE-2026-54515 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-59889 is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-59889"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-77310 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-77310"
      },
      "action_statement": "Vulnerability CVE-2026-77310 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-91776 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91776"
      },
      "action_statement": "Vulnerability CVE-2026-91776 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:19:00.944798+00:00",
      "status_notes": "Vulnerability CVE-2026-91777 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "CVE-2026-91777"
      },
      "action_statement": "Vulnerability CVE-2026-91777 affects version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.6-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-19T20:20:15.352131+00:00",
      "status_notes": "Vulnerability GHSA-mhm7-754m-9p8w is fixed in version 2.9.10.6-tuxcare.1 of com.fasterxml.jackson.core:jackson-databind.",
      "vulnerability": {
        "name": "GHSA-mhm7-754m-9p8w"
      }
    }
  ]
}