CVE-2026-91777
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
CVE-2026-91777- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2026-85003
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
EUVD-2026-85003- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-cxp5-3px4-pw24
jackson-databind quadratic forward-reference completion
Summary
When an @JsonIdentityInfo collection or map first creates N unresolved
object-ID references and later resolves the same IDs in reverse order,
jackson-databind scans the remaining pending-reference accumulator for each
resolution. A shallow JSON document whose size grows linearly can therefore
cause quadratic CPU work during deserialization.
Details
The affected path is forward-reference completion in
CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference()
and the corresponding map implementation. The implementation performs a
linear search of the pending accumulator for every resolved object ID.
The behavior is runtime-confirmed in jackson-databind 2.5.0, 2.22.1, and 3.2.1. Current 2.22 and 3.2 source branches retained the same design when rechecked. A 2.4.0 control fails closed before successful reverse-order completion, so 2.5.0 is the conservative runtime-confirmed affected floor. The patched versions are: 2.18.11, 2.21.7, 2.22.3, 3.1.7 and 3.2.3.
The vulnerable application must deserialize attacker-influenced JSON into an identity-enabled collection or map. The issue does not require deep nesting or syntactically unusual JSON.
Suggested correction: replace repeated linear lookup/removal with a keyed pending-reference structure or another design that provides linear or amortized-linear completion. A regression should preserve input order, duplicate-ID behavior, and unresolved-ID errors while bounding reverse-order resolution work.
PoC
The proof constructs a shallow collection containing N unresolved
@JsonIdentityInfo references followed by definitions of those same IDs in
reverse order. Its ID class counts equals() calls, giving a deterministic
work measure rather than a timing-dependent result.
With N=2,000, affected versions perform exactly 2,003,000 ID comparisons. An
equally sized control in which every reference is already resolved performs
zero comparisons in the pending-reference lookup path. The run is bounded to
a 512 MiB JVM. The result demonstrates quadratic growth: approximately
N * (N + 1) / 2 comparisons, plus fixed setup comparisons.
Impact
An unauthenticated source that can submit JSON to an application using the affected identity-enabled collection or map shape can consume quadratic CPU and exhaust a request-time or worker-capacity budget, causing denial of service. The application model/configuration prerequisite is material. No confidentiality, integrity, code-execution, or parser-depth impact is claimed.
Requested credit: Daniel Birtwhistle
- Record
GHSA-cxp5-3px4-pw24- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
CVE-2026-91777- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSV
jackson-databind: quadratic forward-reference completion in Collection and Map deserializers
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
CVE-2026-91777- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
DEBIAN-CVE-2026-91777- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVGHSA-cxp5-3px4-pw24
jackson-databind quadratic forward-reference completion
Summary
When an @JsonIdentityInfo collection or map first creates N unresolved
object-ID references and later resolves the same IDs in reverse order,
jackson-databind scans the remaining pending-reference accumulator for each
resolution. A shallow JSON document whose size grows linearly can therefore
cause quadratic CPU work during deserialization.
Details
The affected path is forward-reference completion in
CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference()
and the corresponding map implementation. The implementation performs a
linear search of the pending accumulator for every resolved object ID.
The behavior is runtime-confirmed in jackson-databind 2.5.0, 2.22.1, and 3.2.1. Current 2.22 and 3.2 source branches retained the same design when rechecked. A 2.4.0 control fails closed before successful reverse-order completion, so 2.5.0 is the conservative runtime-confirmed affected floor. The patched versions are: 2.18.11, 2.21.7, 2.22.3, 3.1.7 and 3.2.3.
The vulnerable application must deserialize attacker-influenced JSON into an identity-enabled collection or map. The issue does not require deep nesting or syntactically unusual JSON.
Suggested correction: replace repeated linear lookup/removal with a keyed pending-reference structure or another design that provides linear or amortized-linear completion. A regression should preserve input order, duplicate-ID behavior, and unresolved-ID errors while bounding reverse-order resolution work.
PoC
The proof constructs a shallow collection containing N unresolved
@JsonIdentityInfo references followed by definitions of those same IDs in
reverse order. Its ID class counts equals() calls, giving a deterministic
work measure rather than a timing-dependent result.
With N=2,000, affected versions perform exactly 2,003,000 ID comparisons. An
equally sized control in which every reference is already resolved performs
zero comparisons in the pending-reference lookup path. The run is bounded to
a 512 MiB JVM. The result demonstrates quadratic growth: approximately
N * (N + 1) / 2 comparisons, plus fixed setup comparisons.
Impact
An unauthenticated source that can submit JSON to an application using the affected identity-enabled collection or map shape can consume quadratic CPU and exhaust a request-time or worker-capacity budget, causing denial of service. The application model/configuration prerequisite is material. No confidentiality, integrity, code-execution, or parser-depth impact is claimed.
Requested credit: Daniel Birtwhistle
- Record
GHSA-cxp5-3px4-pw24- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHSA-2026:85231
Red Hat Security Advisory: jackson-databind security update
- Record
RHSA-2026:85231- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:85231
Important: jackson-databind security update
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
Security Fix(es):
- com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:85231- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2026:90909
Important: pki-deps:10.6 security update
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.
Security Fix(es):
-
com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425)
-
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
-
com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:90909- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure.
- Record
UBUNTU-CVE-2026-91777- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2026:85231 No score
Important: jackson-databind security update
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.
Security Fix(es):
- com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:85231- Updated
- 2026-11-02
OSVALSA-2026:90909 No score
Important: pki-deps:10.6 security update
The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System.
Security Fix(es):
- com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing (CVE-2026-89425)
- com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion (CVE-2026-91777)
- com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names (CVE-2026-68498)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:90909- Updated
- 2026-11-02
OSVCLSA-2026-1791487635 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.17.3-tuxcare.3.
- Record
CLSA-2026-1791487635- Updated
- 2026-11-02
OSVCLSA-2026-1792441992 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.17.2-tuxcare.2.
- Record
CLSA-2026-1792441992- Updated
- 2026-11-02
OSVCLSA-2026-1792479357 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.14.2-tuxcare.3.
- Record
CLSA-2026-1792479357- Updated
- 2026-11-02
OSVCLSA-2026-1793200513 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.7.8-tuxcare.2.
- Record
CLSA-2026-1793200513- Updated
- 2026-11-02
OSVCLSA-2026-1793201235 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.21.2-tuxcare.1.
- Record
CLSA-2026-1793201235- Updated
- 2026-11-02
OSVCLSA-2026-1793208732 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.13.1-tuxcare.2.
- Record
CLSA-2026-1793208732- Updated
- 2026-11-02
OSVCLSA-2026-1793208938 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.12.1-tuxcare.3.
- Record
CLSA-2026-1793208938- Updated
- 2026-11-02
OSVCLSA-2026-1793209037 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.13.2.2-tuxcare.2.
- Record
CLSA-2026-1793209037- Updated
- 2026-11-02
OSVCLSA-2026-1793209226 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.4.1.1-tuxcare.2.
- Record
CLSA-2026-1793209226- Updated
- 2026-11-06
OSVCLSA-2026-1793209588 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.11.3-tuxcare.3.
- Record
CLSA-2026-1793209588- Updated
- 2026-11-02
OSVCLSA-2026-1793209895 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.13.4-tuxcare.2.
- Record
CLSA-2026-1793209895- Updated
- 2026-11-02
OSVCLSA-2026-1793260179 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.11.4-tuxcare.2.
- Record
CLSA-2026-1793260179- Updated
- 2026-11-02
OSVCLSA-2026-1793260226 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.4.0-tuxcare.2.
- Record
CLSA-2026-1793260226- Updated
- 2026-11-06
OSVCLSA-2026-1793273163 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.9.10-tuxcare.2.
- Record
CLSA-2026-1793273163- Updated
- 2026-11-02
OSVCLSA-2026-1793273322 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.9.8-tuxcare.2.
- Record
CLSA-2026-1793273322- Updated
- 2026-11-02
OSVCLSA-2026-1793273384 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.12.6.1-tuxcare.3.
- Record
CLSA-2026-1793273384- Updated
- 2026-11-02
OSVCLSA-2026-1793274003 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.9.1-tuxcare.2.
- Record
CLSA-2026-1793274003- Updated
- 2026-11-02
OSVCLSA-2026-1793274225 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.7-tuxcare.4.
- Record
CLSA-2026-1793274225- Updated
- 2026-11-02
OSVCLSA-2026-1793274468 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (10 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 10 CVEs. Fixed in 2.12.6-tuxcare.2.
- Record
CLSA-2026-1793274468- Updated
- 2026-11-02
OSVCLSA-2026-1793274500 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.10.3-tuxcare.3.
- Record
CLSA-2026-1793274500- Updated
- 2026-11-02
OSVCLSA-2026-1793274960 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.7-tuxcare.3.
- Record
CLSA-2026-1793274960- Updated
- 2026-11-02
OSVCLSA-2026-1793287973 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.7.1-tuxcare.3.
- Record
CLSA-2026-1793287973- Updated
- 2026-11-02
OSVCLSA-2026-1793288062 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.4-tuxcare.3.
- Record
CLSA-2026-1793288062- Updated
- 2026-11-02
OSVCLSA-2026-1793288185 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.7.9-tuxcare.2.
- Record
CLSA-2026-1793288185- Updated
- 2026-11-02
OSVCLSA-2026-1793288285 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.5-tuxcare.3.
- Record
CLSA-2026-1793288285- Updated
- 2026-11-02
OSVCLSA-2026-1793288379 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.11.1-tuxcare.2.
- Record
CLSA-2026-1793288379- Updated
- 2026-11-02
OSVCLSA-2026-1793288485 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.7-tuxcare.2.
- Record
CLSA-2026-1793288485- Updated
- 2026-11-02
OSVCLSA-2026-1793288575 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.7.5-tuxcare.2.
- Record
CLSA-2026-1793288575- Updated
- 2026-11-06
OSVCLSA-2026-1793288673 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.3-tuxcare.3.
- Record
CLSA-2026-1793288673- Updated
- 2026-11-02
OSVCLSA-2026-1793294610 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.4.5-tuxcare.2.
- Record
CLSA-2026-1793294610- Updated
- 2026-11-06
OSVCLSA-2026-1793294643 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.11-tuxcare.2.
- Record
CLSA-2026-1793294643- Updated
- 2026-11-02
OSVCLSA-2026-1793294975 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.10-tuxcare.3.
- Record
CLSA-2026-1793294975- Updated
- 2026-11-02
OSVCLSA-2026-1793295217 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.4.1-tuxcare.2.
- Record
CLSA-2026-1793295217- Updated
- 2026-11-06
OSVCLSA-2026-1793295274 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.6.7.3-tuxcare.3.
- Record
CLSA-2026-1793295274- Updated
- 2026-11-02
OSVCLSA-2026-1793295302 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.4.3-tuxcare.2.
- Record
CLSA-2026-1793295302- Updated
- 2026-11-06
OSVCLSA-2026-1793295362 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.6.7.2-tuxcare.3.
- Record
CLSA-2026-1793295362- Updated
- 2026-11-06
OSVCLSA-2026-1793295423 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.9.4-tuxcare.2.
- Record
CLSA-2026-1793295423- Updated
- 2026-11-02
OSVCLSA-2026-1793295575 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.13.0-tuxcare.3.
- Record
CLSA-2026-1793295575- Updated
- 2026-11-02
OSVCLSA-2026-1793349010 No score
TuxCare security update for tools.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt tools.jackson.core:jackson-databind to address 6 CVEs. Fixed in 3.1.2-tuxcare.1.
- Record
CLSA-2026-1793349010- Updated
- 2026-11-02
OSVCLSA-2026-1793349383 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.4-tuxcare.3.
- Record
CLSA-2026-1793349383- Updated
- 2026-11-02
OSVCLSA-2026-1793360676 No score
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.5.4-tuxcare.3.
- Record
CLSA-2026-1793360676- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
com.fasterxml.jackson.core:jackson-databindMaven |
2.19.0 to 2.21.6 | 2.21.7 |
tools.jackson.core:jackson-databindMaven |
3.0.0 to 3.1.6 | 3.1.7 |
tools.jackson.core:jackson-databindMaven |
3.2.0 to 3.2.2 | 3.2.3 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.5.0 to 2.18.10 | 2.18.11 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.22.0 to 2.22.2 | 2.22.3 |
pki-jackson-databindAlmaLinux:9 |
before 2.21.6-1.el9_8.1 | 2.21.6-1.el9_8.1 |
apache-commons-collectionsAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.2.2-10.module_el8.5.0+2577+9e95fe00 | 3.2.2-10.module_el8.5.0+2577+9e95fe00 |
apache-commons-langAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.6-21.module_el8.5.0+2577+9e95fe00 | 2.6-21.module_el8.5.0+2577+9e95fe00 |
apache-commons-netAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.6-3.module_el8.5.0+2577+9e95fe00 | 3.6-3.module_el8.5.0+2577+9e95fe00 |
bea-stax-apiAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.2.0-16.module_el8.5.0+2577+9e95fe00 | 1.2.0-16.module_el8.5.0+2577+9e95fe00 |
Show 272 moreShow less
| Package | Affected | Fixed |
|---|---|---|
glassfish-fastinfosetAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.2.13-9.module_el8.5.0+2577+9e95fe00 | 1.2.13-9.module_el8.5.0+2577+9e95fe00 |
glassfish-jaxb-apiAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.2.12-8.module_el8.5.0+2577+9e95fe00 | 2.2.12-8.module_el8.5.0+2577+9e95fe00 |
glassfish-jaxb-coreAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.2.11-12.module_el8.10.0+3791+e0637953 | 2.2.11-12.module_el8.10.0+3791+e0637953 |
glassfish-jaxb-runtimeAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.2.11-12.module_el8.10.0+3791+e0637953 | 2.2.11-12.module_el8.10.0+3791+e0637953 |
glassfish-jaxb-txw2AlmaLinux:8 From an advisory covering 3 CVEs |
before 2.2.11-12.module_el8.10.0+3791+e0637953 | 2.2.11-12.module_el8.10.0+3791+e0637953 |
jackson-annotationsAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21-1.module_el8.10.0+4235+0924958e | 2.21-1.module_el8.10.0+4235+0924958e |
jackson-coreAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21.4-1.module_el8.10.0+4329+908ad137.3 | 2.21.4-1.module_el8.10.0+4329+908ad137.3 |
jackson-databindAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21.4-1.module_el8.10.0+4329+908ad137.1 | 2.21.4-1.module_el8.10.0+4329+908ad137.1 |
jackson-jaxrs-json-providerAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21.4-1.module_el8.10.0+4235+0924958e | 2.21.4-1.module_el8.10.0+4235+0924958e |
jackson-jaxrs-providersAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21.4-1.module_el8.10.0+4235+0924958e | 2.21.4-1.module_el8.10.0+4235+0924958e |
jackson-module-jaxb-annotationsAlmaLinux:8 From an advisory covering 3 CVEs |
before 2.21.4-2.module_el8.10.0+4235+0924958e | 2.21.4-2.module_el8.10.0+4235+0924958e |
jakarta-commons-httpclientAlmaLinux:8 From an advisory covering 3 CVEs |
before 1:3.1-28.module_el8.5.0+2577+9e95fe00 | 1:3.1-28.module_el8.5.0+2577+9e95fe00 |
javassistAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.18.1-8.module_el8.5.0+2577+9e95fe00 | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
javassist-javadocAlmaLinux:8 From an advisory covering 3 CVEs |
before 3.18.1-8.module_el8.5.0+2577+9e95fe00 | 3.18.1-8.module_el8.5.0+2577+9e95fe00 |
pki-servlet-engineAlmaLinux:8 From an advisory covering 3 CVEs |
before 1:9.0.62-1.module_el8.10.0+3791+e0637953 | 1:9.0.62-1.module_el8.10.0+3791+e0637953 |
relaxngDatatypeAlmaLinux:8 From an advisory covering 3 CVEs |
before 2011.1-7.module_el8.5.0+2577+9e95fe00 | 2011.1-7.module_el8.5.0+2577+9e95fe00 |
slf4jAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.7.25-4.module_el8.5.0+2577+9e95fe00 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
slf4j-jdk14AlmaLinux:8 From an advisory covering 3 CVEs |
before 1.7.25-4.module_el8.5.0+2577+9e95fe00 | 1.7.25-4.module_el8.5.0+2577+9e95fe00 |
stax-exAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.7.7-8.module_el8.5.0+2577+9e95fe00 | 1.7.7-8.module_el8.5.0+2577+9e95fe00 |
velocityAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.7-24.module_el8.5.0+2577+9e95fe00 | 1.7-24.module_el8.5.0+2577+9e95fe00 |
xalan-j2AlmaLinux:8 From an advisory covering 3 CVEs |
before 2.7.1-38.module_el8.5.0+2577+9e95fe00 | 2.7.1-38.module_el8.5.0+2577+9e95fe00 |
xerces-j2AlmaLinux:8 From an advisory covering 3 CVEs |
before 2.11.0-34.module_el8.5.0+2577+9e95fe00 | 2.11.0-34.module_el8.5.0+2577+9e95fe00 |
xml-commons-apisAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.4.01-25.module_el8.5.0+2577+9e95fe00 | 1.4.01-25.module_el8.5.0+2577+9e95fe00 |
xml-commons-resolverAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.2-26.module_el8.5.0+2577+9e95fe00 | 1.2-26.module_el8.5.0+2577+9e95fe00 |
xmlstreambufferAlmaLinux:8 From an advisory covering 3 CVEs |
before 1.5.4-8.module_el8.5.0+2577+9e95fe00 | 1.5.4-8.module_el8.5.0+2577+9e95fe00 |
xsomAlmaLinux:8 From an advisory covering 3 CVEs |
before 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 | 0-19.20110809svn.module_el8.5.0+2577+9e95fe00 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.17.3 up to 2.17.3-tuxcare.3, plus listed versions 2.17.3-tuxcare.12.17.3-tuxcare.2 |
2.17.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.17.2 up to 2.17.2-tuxcare.2, plus listed versions 2.17.2-tuxcare.1 |
2.17.2-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.14.2 up to 2.14.2-tuxcare.3, plus listed versions 2.14.2-tuxcare.12.14.2-tuxcare.2 |
2.14.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.7.8 up to 2.7.8-tuxcare.2, plus listed versions 2.7.8-tuxcare.1 |
2.7.8-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.21.2 up to 2.21.2-tuxcare.1 | 2.21.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.13.1 up to 2.13.1-tuxcare.2, plus listed versions 2.13.1-tuxcare.1 |
2.13.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.12.1 up to 2.12.1-tuxcare.3, plus listed versions 2.12.1-tuxcare.12.12.1-tuxcare.2 |
2.12.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.13.2.2 up to 2.13.2.2-tuxcare.2, plus listed versions 2.13.2.2-tuxcare.1 |
2.13.2.2-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.4.1.1 up to 2.4.1.1-tuxcare.2, plus listed versions 2.4.1.1-tuxcare.1 |
2.4.1.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.11.3 up to 2.11.3-tuxcare.3, plus listed versions 2.11.3-tuxcare.12.11.3-tuxcare.2 |
2.11.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.13.4 up to 2.13.4-tuxcare.2, plus listed versions 2.13.4-tuxcare.1 |
2.13.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.11.4 up to 2.11.4-tuxcare.2, plus listed versions 2.11.4-tuxcare.1 |
2.11.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.4.0 up to 2.4.0-tuxcare.2, plus listed versions 2.4.0-tuxcare.1 |
2.4.0-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.9.10 up to 2.9.10-tuxcare.2, plus listed versions 2.9.10-tuxcare.1 |
2.9.10-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.9.8 up to 2.9.8-tuxcare.2, plus listed versions 2.9.8-tuxcare.1 |
2.9.8-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.12.6.1 up to 2.12.6.1-tuxcare.3, plus listed versions 2.12.6.1-tuxcare.12.12.6.1-tuxcare.2 |
2.12.6.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.9.1 up to 2.9.9.1-tuxcare.2, plus listed versions 2.9.9.1-tuxcare.1 |
2.9.9.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.7 up to 2.8.7-tuxcare.4, plus listed versions 2.8.7-tuxcare.12.8.7-tuxcare.22.8.7-tuxcare.3 |
2.8.7-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.12.6 up to 2.12.6-tuxcare.2, plus listed versions 2.12.6-tuxcare.1 |
2.12.6-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.10.3 up to 2.9.10.3-tuxcare.3, plus listed versions 2.9.10.3-tuxcare.12.9.10.3-tuxcare.2 |
2.9.10.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.12.7 up to 2.12.7-tuxcare.3, plus listed versions 2.12.7-tuxcare.12.12.7-tuxcare.2 |
2.12.7-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.7.1 up to 2.7.1-tuxcare.3, plus listed versions 2.7.1-tuxcare.12.7.1-tuxcare.2 |
2.7.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.4 up to 2.8.4-tuxcare.3, plus listed versions 2.8.4-tuxcare.12.8.4-tuxcare.2 |
2.8.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.7.9 up to 2.7.9-tuxcare.2, plus listed versions 2.7.9-tuxcare.1 |
2.7.9-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.5 up to 2.8.5-tuxcare.3, plus listed versions 2.8.5-tuxcare.12.8.5-tuxcare.2 |
2.8.5-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11.1 up to 2.8.11.1-tuxcare.2, plus listed versions 2.8.11.1-tuxcare.1 |
2.8.11.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.7 up to 2.9.7-tuxcare.2, plus listed versions 2.9.7-tuxcare.1 |
2.9.7-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.7.5 up to 2.7.5-tuxcare.2, plus listed versions 2.7.5-tuxcare.1 |
2.7.5-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.3 up to 2.9.3-tuxcare.3, plus listed versions 2.9.3-tuxcare.12.9.3-tuxcare.2 |
2.9.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 12 CVEs |
2.4.5 up to 2.4.5-tuxcare.2, plus listed versions 2.4.5-tuxcare.1 |
2.4.5-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.11 up to 2.8.11-tuxcare.2, plus listed versions 2.8.11-tuxcare.1 |
2.8.11-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.8.10 up to 2.8.10-tuxcare.3, plus listed versions 2.8.10-tuxcare.12.8.10-tuxcare.2 |
2.8.10-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 12 CVEs |
2.4.1 up to 2.4.1-tuxcare.2, plus listed versions 2.4.1-tuxcare.1 |
2.4.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.6.7.3 up to 2.6.7.3-tuxcare.3, plus listed versions 2.6.7.3-tuxcare.12.6.7.3-tuxcare.2 |
2.6.7.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.4.3 up to 2.4.3-tuxcare.2, plus listed versions 2.4.3-tuxcare.1 |
2.4.3-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.6.7.2 up to 2.6.7.2-tuxcare.3, plus listed versions 2.6.7.2-tuxcare.12.6.7.2-tuxcare.2 |
2.6.7.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.9.4 up to 2.9.4-tuxcare.2, plus listed versions 2.9.4-tuxcare.1 |
2.9.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.13.0 up to 2.13.0-tuxcare.3, plus listed versions 2.13.0-tuxcare.12.13.0-tuxcare.2 |
2.13.0-tuxcare.3 |
tools.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
3.1.2 up to 3.1.2-tuxcare.1 | 3.1.2-tuxcare.1 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.12.4 up to 2.12.4-tuxcare.3, plus listed versions 2.12.4-tuxcare.12.12.4-tuxcare.2 |
2.12.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.5.4 up to 2.5.4-tuxcare.3, plus listed versions 2.5.4-tuxcare.12.5.4-tuxcare.2 |
2.5.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.6.6 up to 2.6.6-tuxcare.3, plus listed versions 2.6.6-tuxcare.12.6.6-tuxcare.2 |
2.6.6-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.10.4 up to 2.10.4-tuxcare.3, plus listed versions 2.10.4-tuxcare.12.10.4-tuxcare.2 |
2.10.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.9.10.7 up to 2.9.10.7-tuxcare.3, plus listed versions 2.9.10.7-tuxcare.12.9.10.7-tuxcare.2 |
2.9.10.7-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.18.4 up to 2.18.4-tuxcare.3, plus listed versions 2.18.4-tuxcare.12.18.4-tuxcare.2 |
2.18.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.16.2 up to 2.16.2-tuxcare.3, plus listed versions 2.16.2-tuxcare.12.16.2-tuxcare.2 |
2.16.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.15.1 up to 2.15.1-tuxcare.3, plus listed versions 2.15.1-tuxcare.12.15.1-tuxcare.2 |
2.15.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.10.2 up to 2.10.2-tuxcare.3, plus listed versions 2.10.2-tuxcare.12.10.2-tuxcare.2 |
2.10.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.10.3 up to 2.10.3-tuxcare.3, plus listed versions 2.10.3-tuxcare.12.10.3-tuxcare.2 |
2.10.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.15.0 up to 2.15.0-tuxcare.2, plus listed versions 2.15.0-tuxcare.1 |
2.15.0-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.15.4 up to 2.15.4-tuxcare.4, plus listed versions 2.15.4-tuxcare.12.15.4-tuxcare.22.15.4-tuxcare.3 |
2.15.4-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 3 CVEs |
2.18.5 up to 2.18.5-tuxcare.3, plus listed versions 2.18.5-tuxcare.12.18.5-tuxcare.2 |
2.18.5-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.7.9.7 up to 2.7.9.7-tuxcare.3, plus listed versions 2.7.9.7-tuxcare.12.7.9.7-tuxcare.2 |
2.7.9.7-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.9.10.4 up to 2.9.10.4-tuxcare.3, plus listed versions 2.9.10.4-tuxcare.12.9.10.4-tuxcare.2 |
2.9.10.4-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 14 CVEs |
2.8.11.3 up to 2.8.11.3-tuxcare.2, plus listed versions 2.8.11.3-tuxcare.1 |
2.8.11.3-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 12 CVEs |
2.9.1 up to 2.9.1-tuxcare.2, plus listed versions 2.9.1-tuxcare.1 |
2.9.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.7.9.3 up to 2.7.9.3-tuxcare.3, plus listed versions 2.7.9.3-tuxcare.12.7.9.3-tuxcare.2 |
2.7.9.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 13 CVEs |
2.9.9 up to 2.9.9-tuxcare.2, plus listed versions 2.9.9-tuxcare.1 |
2.9.9-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 16 CVEs |
2.9.9.3 up to 2.9.9.3-tuxcare.2, plus listed versions 2.9.9.3-tuxcare.1 |
2.9.9.3-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 13 CVEs |
2.8.11.4 up to 2.8.11.4-tuxcare.2, plus listed versions 2.8.11.4-tuxcare.1 |
2.8.11.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 19 CVEs |
2.9.5 up to 2.9.5-tuxcare.2, plus listed versions 2.9.5-tuxcare.1 |
2.9.5-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.6.4 up to 2.6.4-tuxcare.2, plus listed versions 2.6.4-tuxcare.1 |
2.6.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.7.3 up to 2.7.3-tuxcare.3, plus listed versions 2.7.3-tuxcare.12.7.3-tuxcare.2 |
2.7.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 7 CVEs |
2.18.0 up to 2.18.0-tuxcare.3, plus listed versions 2.18.0-tuxcare.12.18.0-tuxcare.2 |
2.18.0-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 14 CVEs |
2.9.10.1 up to 2.9.10.1-tuxcare.2, plus listed versions 2.9.10.1-tuxcare.1 |
2.9.10.1-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 11 CVEs |
2.9.2 up to 2.9.2-tuxcare.3, plus listed versions 2.9.2-tuxcare.12.9.2-tuxcare.2 |
2.9.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.12.2 up to 2.12.2-tuxcare.3, plus listed versions 2.12.2-tuxcare.12.12.2-tuxcare.2 |
2.12.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.6.7.1 up to 2.6.7.1-tuxcare.3, plus listed versions 2.6.7.1-tuxcare.12.6.7.1-tuxcare.2 |
2.6.7.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.6.5 up to 2.6.5-tuxcare.3, plus listed versions 2.6.5-tuxcare.12.6.5-tuxcare.2 |
2.6.5-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.16.0 up to 2.16.0-tuxcare.4, plus listed versions 2.16.0-tuxcare.12.16.0-tuxcare.22.16.0-tuxcare.3 |
2.16.0-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.6.3 up to 2.6.3-tuxcare.3, plus listed versions 2.6.3-tuxcare.12.6.3-tuxcare.2 |
2.6.3-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.17.0 up to 2.17.0-tuxcare.2, plus listed versions 2.17.0-tuxcare.1 |
2.17.0-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.21.4 up to 2.21.4-tuxcare.2, plus listed versions 2.21.4-tuxcare.1 |
2.21.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.13.4.2 up to 2.13.4.2-tuxcare.3, plus listed versions 2.13.4.2-tuxcare.12.13.4.2-tuxcare.2 |
2.13.4.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 4 CVEs |
2.19.4 up to 2.19.4-tuxcare.2, plus listed versions 2.19.4-tuxcare.1 |
2.19.4-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.12.5 up to 2.12.5-tuxcare.3, plus listed versions 2.12.5-tuxcare.12.12.5-tuxcare.2 |
2.12.5-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.13.5 up to 2.13.5-tuxcare.3, plus listed versions 2.13.5-tuxcare.12.13.5-tuxcare.2 |
2.13.5-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.17.1 up to 2.17.1-tuxcare.4, plus listed versions 2.17.1-tuxcare.12.17.1-tuxcare.22.17.1-tuxcare.3 |
2.17.1-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.11.1 up to 2.11.1-tuxcare.4, plus listed versions 2.11.1-tuxcare.12.11.1-tuxcare.22.11.1-tuxcare.3 |
2.11.1-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.19.2 up to 2.19.2-tuxcare.2, plus listed versions 2.19.2-tuxcare.1 |
2.19.2-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.14.1 up to 2.14.1-tuxcare.3, plus listed versions 2.14.1-tuxcare.12.14.1-tuxcare.2 |
2.14.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.10.5.1 up to 2.10.5.1-tuxcare.3, plus listed versions 2.10.5.1-tuxcare.12.10.5.1-tuxcare.2 |
2.10.5.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.19.0 up to 2.19.0-tuxcare.3, plus listed versions 2.19.0-tuxcare.12.19.0-tuxcare.2 |
2.19.0-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.18.3 up to 2.18.3-tuxcare.4, plus listed versions 2.18.3-tuxcare.12.18.3-tuxcare.22.18.3-tuxcare.3 |
2.18.3-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.11.0 up to 2.11.0-tuxcare.3, plus listed versions 2.11.0-tuxcare.12.11.0-tuxcare.2 |
2.11.0-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.16.1 up to 2.16.1-tuxcare.3, plus listed versions 2.16.1-tuxcare.12.16.1-tuxcare.2 |
2.16.1-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.18.8 up to 2.18.8-tuxcare.3, plus listed versions 2.18.8-tuxcare.12.18.8-tuxcare.2 |
2.18.8-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.9.10.8 up to 2.9.10.8-tuxcare.3, plus listed versions 2.9.10.8-tuxcare.12.9.10.8-tuxcare.2 |
2.9.10.8-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.20.1 up to 2.20.1-tuxcare.4, plus listed versions 2.20.1-tuxcare.12.20.1-tuxcare.22.20.1-tuxcare.3 |
2.20.1-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 10 CVEs |
2.9.10.6 up to 2.9.10.6-tuxcare.2, plus listed versions 2.9.10.6-tuxcare.1 |
2.9.10.6-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 8 CVEs |
2.7.0 up to 2.7.0-tuxcare.3, plus listed versions 2.7.0-tuxcare.12.7.0-tuxcare.2 |
2.7.0-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.12.7.1 up to 2.12.7.1-tuxcare.4, plus listed versions 2.12.7.1-tuxcare.12.12.7.1-tuxcare.22.12.7.1-tuxcare.3 |
2.12.7.1-tuxcare.4 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.13.3 up to 2.13.3-tuxcare.2, plus listed versions 2.13.3-tuxcare.1 |
2.13.3-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.11.2 up to 2.11.2-tuxcare.2, plus listed versions 2.11.2-tuxcare.1 |
2.11.2-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven |
2.18.2 up to 2.18.2-tuxcare.3, plus listed versions 2.18.2-tuxcare.12.18.2-tuxcare.2 |
2.18.2-tuxcare.3 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 6 CVEs |
2.9.10.5 up to 2.9.10.5-tuxcare.2, plus listed versions 2.9.10.5-tuxcare.1 |
2.9.10.5-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 5 CVEs |
2.14.3 up to 2.14.3-tuxcare.2, plus listed versions 2.14.3-tuxcare.1 |
2.14.3-tuxcare.2 |
com.fasterxml.jackson.core:jackson-databindTuxCare:Maven From an advisory covering 2 CVEs |
2.15.3 up to 2.15.3-tuxcare.5, plus listed versions 2.15.3-tuxcare.12.15.3-tuxcare.22.15.3-tuxcare.32.15.3-tuxcare.4 |
2.15.3-tuxcare.5 |
jackson-databindDebian:12 |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-22.14.0+ds-32.14.0-12.14.0-1+deb12u12.18.11-1 |
None known |
jackson-databindDebian:13 |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-1+deb13u12.14.0+ds-22.14.0+ds-32.18.11-1 |
None known |
jackson-databindDebian:14 |
before 2.18.11-1, plus listed versions 2.14.0+ds-12.14.0+ds-22.14.0+ds-3 |
2.18.11-1 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.19.0 up to 2.21.7, plus listed versions 2.19.12.19.22.19.32.19.42.20.0 Show 10 moreShow less2.20.0-rc12.20.12.20.22.21.02.21.12.21.22.21.32.21.42.21.52.21.6 |
2.21.7 |
tools.jackson.core:jackson-databindMaven |
3.0.0 up to 3.1.7, plus listed versions 3.0.13.0.23.0.33.0.43.1.0 Show 7 moreShow less3.1.0-rc13.1.13.1.23.1.33.1.43.1.53.1.6 |
3.1.7 |
tools.jackson.core:jackson-databindMaven |
3.2.0 up to 3.2.3, plus listed versions 3.2.13.2.2 |
3.2.3 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.5.0 up to 2.18.11, plus listed versions 2.10.02.10.0.pr12.10.0.pr22.10.0.pr32.10.1 Show 45 moreShow less2.10.22.10.32.10.42.10.52.10.5.12.11.02.11.0.rc12.11.12.11.22.11.32.11.42.12.02.12.0-rc12.12.0-rc22.12.12.12.22.12.32.12.42.12.52.12.62.12.6.12.12.72.12.7.12.12.7.22.13.02.13.0-rc12.13.0-rc22.13.12.13.22.13.2.12.13.2.22.13.32.13.42.13.4.12.13.4.22.13.52.14.02.14.0-rc12.14.0-rc22.14.0-rc32.14.12.14.22.14.32.15.02.15.0-rc1 |
2.18.11 |
com.fasterxml.jackson.core:jackson-databindMaven |
2.22.0 up to 2.22.3, plus listed versions 2.22.12.22.2 |
2.22.3 |
jackson-databindRed Hat:enterprise_linux:9::appstream |
before 0:2.21.6-1.el9_8.1 | 0:2.21.6-1.el9_8.1 |
pki-jackson-databindRed Hat:enterprise_linux:9::appstream |
before 0:2.21.6-1.el9_8.1 | 0:2.21.6-1.el9_8.1 |
jackson-databindRocky Linux:9 |
before 0:2.21.6-1.el9_8.1 | 0:2.21.6-1.el9_8.1 |
apache-commons-collectionsRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.2.2-10.module+el8.10.0+1763+c7c02164 | 0:3.2.2-10.module+el8.10.0+1763+c7c02164 |
apache-commons-collectionsRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.2.2-10.module+el8.10.0+2052+1b0fb438 | 0:3.2.2-10.module+el8.10.0+2052+1b0fb438 |
apache-commons-collectionsRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.2.2-10.module+el8.3.0+74+855e3f5d | 0:3.2.2-10.module+el8.3.0+74+855e3f5d |
apache-commons-langRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.6-21.module+el8.10.0+1763+c7c02164 | 0:2.6-21.module+el8.10.0+1763+c7c02164 |
apache-commons-langRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.6-21.module+el8.3.0+74+855e3f5d | 0:2.6-21.module+el8.3.0+74+855e3f5d |
apache-commons-netRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.6-3.module+el8.10.0+1763+c7c02164 | 0:3.6-3.module+el8.10.0+1763+c7c02164 |
apache-commons-netRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.6-3.module+el8.10.0+2052+1b0fb438 | 0:3.6-3.module+el8.10.0+2052+1b0fb438 |
apache-commons-netRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.6-3.module+el8.3.0+74+855e3f5d | 0:3.6-3.module+el8.3.0+74+855e3f5d |
bea-staxRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2.0-16.module+el8.10.0+1763+c7c02164 | 0:1.2.0-16.module+el8.10.0+1763+c7c02164 |
bea-staxRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2.0-16.module+el8.10.0+2052+1b0fb438 | 0:1.2.0-16.module+el8.10.0+2052+1b0fb438 |
glassfish-fastinfosetRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2.13-9.module+el8.10.0+1763+c7c02164 | 0:1.2.13-9.module+el8.10.0+1763+c7c02164 |
glassfish-fastinfosetRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2.13-9.module+el8.10.0+2052+1b0fb438 | 0:1.2.13-9.module+el8.10.0+2052+1b0fb438 |
glassfish-jaxbRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.2.11-12.module+el8.10.0+1763+c7c02164 | 0:2.2.11-12.module+el8.10.0+1763+c7c02164 |
glassfish-jaxbRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.2.11-12.module+el8.10.0+2052+1b0fb438 | 0:2.2.11-12.module+el8.10.0+2052+1b0fb438 |
glassfish-jaxb-apiRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.2.12-8.module+el8.10.0+1763+c7c02164 | 0:2.2.12-8.module+el8.10.0+1763+c7c02164 |
glassfish-jaxb-apiRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.2.12-8.module+el8.10.0+2052+1b0fb438 | 0:2.2.12-8.module+el8.10.0+2052+1b0fb438 |
jackson-annotationsRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21-1.module+el8.10.0+40260+021059e6 | 0:2.21-1.module+el8.10.0+40260+021059e6 |
jackson-coreRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-1.module+el8.10.0+40260+021059e6 | 0:2.21.4-1.module+el8.10.0+40260+021059e6 |
jackson-coreRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.3 | 0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.3 |
jackson-databindRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.1 | 0:2.21.4-1.module+el8.10.0+40398+3ebe5a98.1 |
jackson-databindRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-1.module+el8.10.0+40260+021059e6 | 0:2.21.4-1.module+el8.10.0+40260+021059e6 |
jackson-jaxrs-providersRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-1.module+el8.10.0+40260+021059e6 | 0:2.21.4-1.module+el8.10.0+40260+021059e6 |
jackson-modules-baseRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.21.4-2.module+el8.10.0+40260+021059e6 | 0:2.21.4-2.module+el8.10.0+40260+021059e6 |
jakarta-commons-httpclientRocky Linux:8 From an advisory covering 3 CVEs |
before 1:3.1-28.module+el8.10.0+1763+c7c02164 | 1:3.1-28.module+el8.10.0+1763+c7c02164 |
jakarta-commons-httpclientRocky Linux:8 From an advisory covering 3 CVEs |
before 1:3.1-28.module+el8.10.0+2052+1b0fb438 | 1:3.1-28.module+el8.10.0+2052+1b0fb438 |
jakarta-commons-httpclientRocky Linux:8 From an advisory covering 3 CVEs |
before 1:3.1-28.module+el8.3.0+74+855e3f5d | 1:3.1-28.module+el8.3.0+74+855e3f5d |
javassistRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.18.1-8.module+el8.10.0+1763+c7c02164 | 0:3.18.1-8.module+el8.10.0+1763+c7c02164 |
javassistRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.18.1-8.module+el8.10.0+2052+1b0fb438 | 0:3.18.1-8.module+el8.10.0+2052+1b0fb438 |
javassistRocky Linux:8 From an advisory covering 3 CVEs |
before 0:3.18.1-8.module+el8.3.0+74+855e3f5d | 0:3.18.1-8.module+el8.3.0+74+855e3f5d |
pki-servlet-engineRocky Linux:8 From an advisory covering 3 CVEs |
before 1:9.0.62-1.module+el8.10.0+1767+f923f786 | 1:9.0.62-1.module+el8.10.0+1767+f923f786 |
pki-servlet-engineRocky Linux:8 From an advisory covering 3 CVEs |
before 1:9.0.62-1.module+el8.10.0+2052+1b0fb438 | 1:9.0.62-1.module+el8.10.0+2052+1b0fb438 |
relaxngDatatypeRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2011.1-7.module+el8.10.0+1763+c7c02164 | 0:2011.1-7.module+el8.10.0+1763+c7c02164 |
relaxngDatatypeRocky Linux:8 From an advisory covering 3 CVEs |
before 0:2011.1-7.module+el8.10.0+2052+1b0fb438 | 0:2011.1-7.module+el8.10.0+2052+1b0fb438 |
slf4jRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.25-4.module+el8.10.0+1763+c7c02164 | 0:1.7.25-4.module+el8.10.0+1763+c7c02164 |
slf4jRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.25-4.module+el8.10.0+2052+1b0fb438 | 0:1.7.25-4.module+el8.10.0+2052+1b0fb438 |
slf4jRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.25-4.module+el8.6.0+843+5a13dac3 | 0:1.7.25-4.module+el8.6.0+843+5a13dac3 |
slf4jRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.25-4.module+el8.3.0+74+855e3f5d | 0:1.7.25-4.module+el8.3.0+74+855e3f5d |
slf4jRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.25-4.module+el8.10.0+2003+8aeac9cb | 0:1.7.25-4.module+el8.10.0+2003+8aeac9cb |
stax-exRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.7-8.module+el8.10.0+1763+c7c02164 | 0:1.7.7-8.module+el8.10.0+1763+c7c02164 |
stax-exRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7.7-8.module+el8.10.0+2052+1b0fb438 | 0:1.7.7-8.module+el8.10.0+2052+1b0fb438 |
velocityRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7-24.module+el8.10.0+1763+c7c02164 | 0:1.7-24.module+el8.10.0+1763+c7c02164 |
velocityRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7-24.module+el8.10.0+2052+1b0fb438 | 0:1.7-24.module+el8.10.0+2052+1b0fb438 |
velocityRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.7-24.module+el8.3.0+74+855e3f5d | 0:1.7-24.module+el8.3.0+74+855e3f5d |
xalan-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.7.1-38.module+el8.10.0+1763+c7c02164 | 0:2.7.1-38.module+el8.10.0+1763+c7c02164 |
xalan-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.7.1-38.module+el8.10.0+2052+1b0fb438 | 0:2.7.1-38.module+el8.10.0+2052+1b0fb438 |
xalan-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.7.1-38.module+el8.3.0+74+855e3f5d | 0:2.7.1-38.module+el8.3.0+74+855e3f5d |
xerces-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.11.0-34.module+el8.10.0+1763+c7c02164 | 0:2.11.0-34.module+el8.10.0+1763+c7c02164 |
xerces-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 | 0:2.11.0-34.module+el8.10.0+2052+1b0fb438 |
xerces-j2Rocky Linux:8 From an advisory covering 3 CVEs |
before 0:2.11.0-34.module+el8.3.0+74+855e3f5d | 0:2.11.0-34.module+el8.3.0+74+855e3f5d |
xml-commons-apisRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.4.01-25.module+el8.10.0+1763+c7c02164 | 0:1.4.01-25.module+el8.10.0+1763+c7c02164 |
xml-commons-apisRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.4.01-25.module+el8.10.0+2052+1b0fb438 | 0:1.4.01-25.module+el8.10.0+2052+1b0fb438 |
xml-commons-apisRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.4.01-25.module+el8.10.0+2003+8aeac9cb | 0:1.4.01-25.module+el8.10.0+2003+8aeac9cb |
xml-commons-apisRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.4.01-25.module+el8.3.0+74+855e3f5d | 0:1.4.01-25.module+el8.3.0+74+855e3f5d |
xml-commons-resolverRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2-26.module+el8.10.0+2052+1b0fb438 | 0:1.2-26.module+el8.10.0+2052+1b0fb438 |
xml-commons-resolverRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2-26.module+el8.10.0+1763+c7c02164 | 0:1.2-26.module+el8.10.0+1763+c7c02164 |
xml-commons-resolverRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.2-26.module+el8.3.0+74+855e3f5d | 0:1.2-26.module+el8.3.0+74+855e3f5d |
xmlstreambufferRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.5.4-8.module+el8.10.0+1763+c7c02164 | 0:1.5.4-8.module+el8.10.0+1763+c7c02164 |
xmlstreambufferRocky Linux:8 From an advisory covering 3 CVEs |
before 0:1.5.4-8.module+el8.10.0+2052+1b0fb438 | 0:1.5.4-8.module+el8.10.0+2052+1b0fb438 |
xsomRocky Linux:8 From an advisory covering 3 CVEs |
before 0:0-19.20110809svn.module+el8.10.0+1763+c7c02164 | 0:0-19.20110809svn.module+el8.10.0+1763+c7c02164 |
xsomRocky Linux:8 From an advisory covering 3 CVEs |
before 0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438 | 0:0-19.20110809svn.module+el8.10.0+2052+1b0fb438 |
com.fasterxml.jackson.core:jackson-databindRoot:Maven |
before 2.18.9-aikido.2 | 2.18.9-aikido.22.21.5-aikido.22.21.5-aikido.32.13.3-aikido.62.13.3-aikido.72.12.7.1-aikido.22.12.7.1-aikido.32.21.4-aikido.22.14.2-aikido.42.22.1-aikido.12.21.1-aikido.42.13.4.2-aikido.32.12.6.1-aikido.22.12.7-aikido.22.13.2.2-aikido.52.18.1-aikido.42.17.2-aikido.62.16.0-aikido.32.17.1-aikido.32.18.3-aikido.42.19.1-aikido.22.21.2-aikido.42.19.4-aikido.52.21.3-aikido.32.20.0-aikido.42.18.10-aikido.12.15.2-aikido.42.21.6-aikido.12.19.0-aikido.22.15.0-aikido.42.16.2-aikido.62.18.8-aikido.22.18.2-aikido.42.22.2-aikido.12.22.1-aikido.22.19.0-aikido.32.18.3-aikido.52.21.2-aikido.52.19.1-aikido.32.22.0-aikido.12.13.5-aikido.2 |
tools.jackson.core:jackson-databindRoot:Maven |
before 3.1.5-aikido.3 | 3.1.5-aikido.33.1.4-aikido.23.1.6-aikido.13.1.4-aikido.33.1.5-aikido.43.1.4-aikido.43.2.2-aikido.1 |
io.root.com.fasterxml.jackson.core:jackson-databindRoot:Maven |
before 2.18.9-root.io.2 | 2.18.9-root.io.22.21.5-root.io.22.21.5-root.io.32.13.3-root.io.62.13.3-root.io.72.12.7.1-root.io.22.12.7.1-root.io.32.21.4-root.io.22.14.2-root.io.42.22.1-root.io.12.21.1-root.io.42.13.4.2-root.io.32.12.6.1-root.io.22.12.7-root.io.22.13.2.2-root.io.52.18.1-root.io.42.17.2-root.io.62.16.0-root.io.32.17.1-root.io.32.18.3-root.io.42.19.1-root.io.22.21.2-root.io.42.19.4-root.io.52.21.3-root.io.32.20.0-root.io.42.18.10-root.io.12.15.2-root.io.42.21.6-root.io.12.19.0-root.io.22.15.0-root.io.42.16.2-root.io.62.18.8-root.io.22.18.2-root.io.42.22.2-root.io.12.22.1-root.io.22.19.0-root.io.32.18.3-root.io.52.21.2-root.io.52.19.1-root.io.32.22.0-root.io.12.13.5-root.io.2 |
io.root.tools.jackson.core:jackson-databindRoot:Maven |
before 3.1.5-root.io.3 | 3.1.5-root.io.33.1.4-root.io.23.1.6-root.io.13.1.4-root.io.33.1.5-root.io.43.1.4-root.io.43.2.2-root.io.1 |
jackson-annotationsSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-coreSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-databindSUSE:Linux Enterprise Server 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-coreSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-databindSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-annotationsSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-annotationsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.28.1 | 2.18.11-150200.3.28.1 |
jackson-coreSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.30.1 | 2.18.11-150200.3.30.1 |
jackson-databindSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.36.1 | 2.18.11-150200.3.36.1 |
jackson-dataformat-xmlSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 12 CVEs |
before 2.18.11-150200.5.8.1 | 2.18.11-150200.5.8.1 |
jackson-dataformats-binarySUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 12 CVEs |
before 2.18.11-150200.3.29.1 | 2.18.11-150200.3.29.1 |
jackson-databindUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2.2.2-12.2.2-1ubuntu0.1~esm1 |
None known |
jackson-databindUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.4.2-22.4.2-32.4.2-3ubuntu0.1~esm12.4.2-3ubuntu0.1~esm2 |
None known |
jackson-databindUbuntu:18.04:LTS |
All versions, plus listed versions 2.8.6-12.9.1-12.9.4-12.9.5-12.9.8-1~18.04 |
None known |
jackson-databindUbuntu:20.04:LTS |
All versions, plus listed versions 2.9.9.3-12.10.0-22.10.1-12.10.2-1 |
None known |
jackson-databindUbuntu:22.04:LTS |
All versions, plus listed versions 2.12.1-12.12.5-12.13.0-12.13.0-2 |
None known |
jackson-databindUbuntu:24.04:LTS |
All versions, plus listed versions 2.14.0-1 |
None known |
jackson-databindUbuntu:26.10 |
All versions, plus listed versions 2.14.0+ds-1build12.14.0+ds-2 |
None known |
jackson-databindUbuntu:26.04:LTS |
All versions, plus listed versions 2.14.0+ds-12.14.0+ds-1build1 |
None known |
jackson-databindopenSUSE:Tumbleweed From an advisory covering 5 CVEs |
before 2.18.11-1.1 | 2.18.11-1.1 |
jackson-annotationsopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-coreopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
jackson-databindopenSUSE:Leap 16.0 From an advisory covering 10 CVEs |
before 2.18.11-160000.1.1 | 2.18.11-160000.1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | ||
| affected, aliases_more, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-91777 is a high vulnerability (CVSS 7.5) in Fasterxml Jackson-databind, published September 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in com.fasterxml.jackson.core:jackson-databind 2.21.7.
References
github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
nvd.nist.gov/vuln/detail/CVE-2026-91777
Show 54 moreShow less
access.redhat.com/errata/RHSA-2026:85231
bugzilla.redhat.com/2539085
errata.almalinux.org/9/ALSA-2026-85231.html
repo1.maven.org/maven2
security-tracker.debian.org/tracker/CVE-2026-91777
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85231.json
cve.org/CVERecord?id=CVE-2026-91777
errata.rockylinux.org/RLSA-2026:85231
suse.com/support/update/announcement/2026/suse-su-202624149-1
bugzilla.suse.com/1273856
ubuntu.com/security/CVE-2026-91777
Left out here: 117 versions. The JSON record has them. Also not on the record: 13 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 62 source records.