{"id":"CVE-2019-14893","aliases":["DEBIAN-CVE-2019-14893","EUVD-2020-0440","GHSA-qmqc-x3r4-6v39","RHSA-2020:0159","RHSA-2020:0160","RHSA-2020:0161","ROOT-APP-MAVEN-CVE-2019-14893","UBUNTU-CVE-2019-14893","openSUSE-SU-2024:10868-1"],"status":"published","title":"Polymorphic deserialization of malicious object in jackson-databind","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.04091,"percentile":0.90816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-502"],"published":"2020-03-02T20:11:32Z","modified":"2026-10-20T10:52:22Z","fixes":[{"ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.10"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"jackson-databind","fixed_in":["2.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jackson-databind","fixed_in":["2.10.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jackson-databind","fixed_in":["2.10.0-1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.2-root.io.2","2.9.2-root.io.3"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.2-aikido.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10"}]}],"versions":["2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","2.9.9.1","2.9.9.2","2.9.9.3"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-root.io.2"},{"fixed":"2.9.2-root.io.3"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-aikido.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.2-1","2.2.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.6-1","2.9.1-1","2.9.4-1","2.9.5-1","2.9.8-1~18.04"]}],"products":[{"vendor":"fasterxml","product":"jackson-databind"},{"vendor":"netapp","product":"oncommand_api_services"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"oracle","product":"goldengate_stream_analytics"},{"vendor":"red hat","product":"jackson-databind"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2020:0729","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14893","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/2469","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200327-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14893","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/998efd708284778f29d83d7962a9bd935c228317","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://github.com/advisories/GHSA-qmqc-x3r4-6v39"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14893","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200327-0006","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0159","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1738673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775293","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-17491","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17651","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17652","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17666","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17773","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17789","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17805","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17834","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17837","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17887","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17898","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17905","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17906","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17940","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17945","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17974","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17998","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18169","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18170","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10219","tags":["advisory"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14892","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14892","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14893","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16335","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16335","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16943","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17267","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17267","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17531","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0160","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17835","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0160.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0161","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17836","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0161.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14893","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20190","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-14893","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T20:11:32Z","modified":"2026-10-08T21:13:47.91Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-502","CWE-200"],"updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2020-0440","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T20:11:32Z","modified":"2026-10-08T21:13:47Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:26.856493Z"}],"ghsa":[{"id":"GHSA-qmqc-x3r4-6v39","title":"Polymorphic deserialization of malicious object in jackson-databind","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-05-15T18:59:07Z","modified":"2023-02-01T05:02:58Z","cwes":["CWE-502"],"updated_at":"2026-11-02T14:36:31.364752Z"}],"nvd":[{"id":"CVE-2019-14893","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T21:15:17.52Z","modified":"2026-10-08T22:16:50.27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-200","CWE-502"],"updated_at":"2026-11-02T14:05:43.875329Z"}],"osv":[{"id":"CVE-2019-14893","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T21:15:17.52Z","modified":"2026-10-20T10:52:22.578231104Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"DEBIAN-CVE-2019-14893","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T21:15:17.52Z","modified":"2026-10-09T09:47:29.592304086Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2020:0159","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 6 security update","status":"published","published":"2024-09-29T17:24:46Z","modified":"2026-10-13T10:01:37Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0160","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 7 security update","status":"published","published":"2024-09-29T17:25:04Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0161","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 8 security update","status":"published","published":"2024-09-29T17:25:13Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-14893","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-03-02T21:15:00Z","modified":"2025-10-24T04:47:46Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"GHSA-qmqc-x3r4-6v39","title":"Polymorphic deserialization of malicious object in jackson-databind","description":"A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.","status":"published","published":"2020-05-15T18:59:07Z","modified":"2026-08-07T08:12:32.244710454Z","cwes":["CWE-502"],"updated_at":"2026-11-02T15:46:54.760124Z"},{"id":"openSUSE-SU-2024:10868-1","title":"jackson-databind-2.10.5.1-2.2 on GA media","description":"These are all security issues fixed in the jackson-databind-2.10.5.1-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:58.422529Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"ROOT-APP-MAVEN-CVE-2019-14893","title":"CVE-2019-14893 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root","description":"Root has patched CVE-2019-14893 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-17T12:17:40Z","modified":"2026-06-17T18:15:12.395347939Z","updated_at":"2026-11-02T15:53:27.066589Z"}]}}