{"id":"CVE-2019-16942","aliases":["ALSA-2020:1644","CLSA-2026-1793208072","CLSA-2026-1793360883","CLSA-2026-1793520627","CLSA-2026-1793521240","CLSA-2026-1793521629","CLSA-2026-1793866208","CLSA-2026-1793866444","CLSA-2026-1793866586","CLSA-2026-1793867418","CLSA-2026-1793867830","CLSA-2026-1793868351","CLSA-2026-1793869592","CLSA-2026-1793870384","CLSA-2026-1793957775","CLSA-2026-1794221834","CLSA-2026-1794222386","CLSA-2026-1794223842","CLSA-2026-1794223928","CLSA-2026-1794223990","CLSA-2026-1794224575","CLSA-2026-1794225259","CLSA-2026-1794225369","CLSA-2026-1794225652","CLSA-2026-1794226255","CLSA-2026-1794228139","CLSA-2026-1794233060","DEBIAN-CVE-2019-16942","DLA-1943-1","DSA-4542-1","EUVD-2019-0709","GHSA-mhm7-754m-9p8w","GHSA-mx7p-6679-8g3q","MGASA-2021-0153","RHSA-2020:0159","RHSA-2020:0160","RHSA-2020:0161","RHSA-2020:1644","RLSA-2020:1644","ROOT-APP-MAVEN-CVE-2019-16942","UBUNTU-CVE-2019-16942","USN-4813-1","openSUSE-SU-2024:10868-1"],"status":"published","title":"Polymorphic Typing in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05728,"percentile":0.931,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-502"],"published":"2019-10-01T16:04:26Z","modified":"2026-11-09T19:15:09Z","fixes":[{"ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.10.1","2.6.7.3","2.8.11.5"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"jackson-databind","fixed_in":["2.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jackson-databind","fixed_in":["2.10.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jackson-databind","fixed_in":["2.10.0-2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.2-aikido.3","2.3.1-aikido.2","2.3.1-aikido.3","2.3.1-aikido.4","2.3.1-aikido.5","2.3.1-aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.2-root.io.1","2.9.2-root.io.2","2.9.2-root.io.3","2.3.1-root.io.2","2.3.1-root.io.3","2.3.1-root.io.4","2.3.1-root.io.5","2.3.1-root.io.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","fixed_in":["2.4.2-3ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.6.7.3"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.8.11.5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-10.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-21.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-16.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-9.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.9-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.9-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-nss-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-10.module_el8.5.0+2577+9e95fe00.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-10.module_el8.5.0+2577+9e95fe00.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2011.1-7.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-24.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-38.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-34.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.01-25.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-26.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0-19.20110809svn.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.5.4"},{"fixed":"2.5.4-tuxcare.2"}]}],"versions":["2.5.4","2.5.4-tuxcare.1"],"bundled":30},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.5"},{"fixed":"2.7.5-tuxcare.3"}]}],"versions":["2.7.5","2.7.5-tuxcare.1","2.7.5-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.10"},{"fixed":"2.9.10-tuxcare.3"}]}],"versions":["2.9.10","2.9.10-tuxcare.1","2.9.10-tuxcare.2"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.9.3"},{"fixed":"2.9.9.3-tuxcare.2"}]}],"versions":["2.9.9.3","2.9.9.3-tuxcare.1"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.9"},{"fixed":"2.7.9-tuxcare.4"}]}],"versions":["2.7.9","2.7.9-tuxcare.1","2.7.9-tuxcare.2","2.7.9-tuxcare.3"],"bundled":21},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.7"},{"fixed":"2.8.7-tuxcare.6"}]}],"versions":["2.8.7","2.8.7-tuxcare.1","2.8.7-tuxcare.2","2.8.7-tuxcare.3","2.8.7-tuxcare.4","2.8.7-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.7.0-tuxcare.4"}]}],"versions":["2.7.0","2.7.0-tuxcare.1","2.7.0-tuxcare.2","2.7.0-tuxcare.3"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.9.3"},{"fixed":"2.7.9.3-tuxcare.4"}]}],"versions":["2.7.9.3","2.7.9.3-tuxcare.1","2.7.9.3-tuxcare.2","2.7.9.3-tuxcare.3"],"bundled":16},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.5"},{"fixed":"2.8.5-tuxcare.5"}]}],"versions":["2.8.5","2.8.5-tuxcare.1","2.8.5-tuxcare.2","2.8.5-tuxcare.3","2.8.5-tuxcare.4"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.4"},{"fixed":"2.8.4-tuxcare.6"}]}],"versions":["2.8.4","2.8.4-tuxcare.1","2.8.4-tuxcare.2","2.8.4-tuxcare.3","2.8.4-tuxcare.4","2.8.4-tuxcare.5"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.3"},{"fixed":"2.7.3-tuxcare.4"}]}],"versions":["2.7.3","2.7.3-tuxcare.1","2.7.3-tuxcare.2","2.7.3-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.1"},{"fixed":"2.7.1-tuxcare.6"}]}],"versions":["2.7.1","2.7.1-tuxcare.1","2.7.1-tuxcare.2","2.7.1-tuxcare.3","2.7.1-tuxcare.4","2.7.1-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.9.1"},{"fixed":"2.9.9.1-tuxcare.5"}]}],"versions":["2.9.9.1","2.9.9.1-tuxcare.1","2.9.9.1-tuxcare.2","2.9.9.1-tuxcare.3","2.9.9.1-tuxcare.4"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.11"},{"fixed":"2.8.11-tuxcare.6"}]}],"versions":["2.8.11","2.8.11-tuxcare.1","2.8.11-tuxcare.2","2.8.11-tuxcare.3","2.8.11-tuxcare.4","2.8.11-tuxcare.5"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.8"},{"fixed":"2.9.8-tuxcare.5"}]}],"versions":["2.9.8","2.9.8-tuxcare.1","2.9.8-tuxcare.2","2.9.8-tuxcare.3","2.9.8-tuxcare.4"],"bundled":22},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.11.4"},{"fixed":"2.8.11.4-tuxcare.5"}]}],"versions":["2.8.11.4","2.8.11.4-tuxcare.1","2.8.11.4-tuxcare.2","2.8.11.4-tuxcare.3","2.8.11.4-tuxcare.4"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.3"},{"fixed":"2.9.3-tuxcare.7"}]}],"versions":["2.9.3","2.9.3-tuxcare.1","2.9.3-tuxcare.2","2.9.3-tuxcare.3","2.9.3-tuxcare.4","2.9.3-tuxcare.5","2.9.3-tuxcare.6"],"bundled":20},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.5"},{"fixed":"2.9.5-tuxcare.5"}]}],"versions":["2.9.5","2.9.5-tuxcare.1","2.9.5-tuxcare.2","2.9.5-tuxcare.3","2.9.5-tuxcare.4"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.11.3"},{"fixed":"2.8.11.3-tuxcare.5"}]}],"versions":["2.8.11.3","2.8.11.3-tuxcare.1","2.8.11.3-tuxcare.2","2.8.11.3-tuxcare.3","2.8.11.3-tuxcare.4"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.9"},{"fixed":"2.9.9-tuxcare.4"}]}],"versions":["2.9.9","2.9.9-tuxcare.1","2.9.9-tuxcare.2","2.9.9-tuxcare.3"],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.1"},{"fixed":"2.9.1-tuxcare.4"}]}],"versions":["2.9.1","2.9.1-tuxcare.1","2.9.1-tuxcare.2","2.9.1-tuxcare.3"],"bundled":19},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.7"},{"fixed":"2.9.7-tuxcare.5"}]}],"versions":["2.9.7","2.9.7-tuxcare.1","2.9.7-tuxcare.2","2.9.7-tuxcare.3","2.9.7-tuxcare.4"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.4"},{"fixed":"2.9.4-tuxcare.6"}]}],"versions":["2.9.4","2.9.4-tuxcare.1","2.9.4-tuxcare.2","2.9.4-tuxcare.3","2.9.4-tuxcare.4","2.9.4-tuxcare.5"],"bundled":18},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.1.1"},{"fixed":"2.4.1.1-tuxcare.4"}]}],"versions":["2.4.1.1","2.4.1.1-tuxcare.1","2.4.1.1-tuxcare.2","2.4.1.1-tuxcare.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.10"},{"fixed":"2.8.10-tuxcare.7"}]}],"versions":["2.8.10","2.8.10-tuxcare.1","2.8.10-tuxcare.2","2.8.10-tuxcare.3","2.8.10-tuxcare.4","2.8.10-tuxcare.5","2.8.10-tuxcare.6"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.2"},{"fixed":"2.9.2-tuxcare.5"}]}],"versions":["2.9.2","2.9.2-tuxcare.1","2.9.2-tuxcare.2","2.9.2-tuxcare.3","2.9.2-tuxcare.4"],"bundled":23},{"source":"osv","ecosystem":"Debian:12","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-2"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-2+deb8u9"}]}],"versions":["2.4.2-2","2.4.2-2+deb8u1","2.4.2-2+deb8u2","2.4.2-2+deb8u3","2.4.2-2+deb8u4","2.4.2-2+deb8u5","2.4.2-2+deb8u6","2.4.2-2+deb8u7","2.4.2-2+deb8u8"],"bundled":4},{"source":"osv","ecosystem":"Debian:9","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1+deb9u6"}]}],"versions":["2.8.6-1","2.8.6-1+deb9u1","2.8.6-1+deb9u2","2.8.6-1+deb9u3","2.8.6-1+deb9u4","2.8.6-1+deb9u5"],"bundled":6},{"source":"osv","ecosystem":"Debian:10","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-3+deb10u1"}]}],"versions":["2.9.8-3"],"bundled":6},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10.1"}]}],"versions":["2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.10","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","2.9.9.1","2.9.9.2","2.9.9.3"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.8.11.5"}]}],"versions":["2.7.0","2.7.1","2.7.1-1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.7.9.1","2.7.9.2","2.7.9.3","2.7.9.4","2.7.9.5","2.7.9.6","2.7.9.7","2.8.0","2.8.0.rc1","2.8.0.rc2","2.8.1","2.8.10","2.8.11","2.8.11.1","2.8.11.2","2.8.11.3","2.8.11.4","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.8.1","2.8.9"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.6.7.3"}]}],"versions":["2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.2.0","2.2.0-rc1","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-rc1","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.0-rc1","2.4.0-rc2","2.4.0-rc3","2.4.1","2.4.1.1","2.4.1.2","2.4.1.3","2.4.2","2.4.3","2.4.4","2.4.5","2.4.5.1","2.4.6","2.4.6.1","2.5.0","2.5.0-rc1","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.6.0","2.6.0-rc1","2.6.0-rc2","2.6.0-rc3","2.6.0-rc4","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.7.1","2.6.7.2"]},{"source":"osv","ecosystem":"Mageia:7","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-1.2.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.1.0+3832+9784644d"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.1.0+3832+9784644d"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.7-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.7-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-3.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.1-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-3.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.5.0+697+f586bb30"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+133+b8b54b58"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.5.0+697+f586bb30"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-aikido.3"},{"fixed":"2.3.1-aikido.2"},{"fixed":"2.3.1-aikido.3"},{"fixed":"2.3.1-aikido.4"},{"fixed":"2.3.1-aikido.5"},{"fixed":"2.3.1-aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-root.io.1"},{"fixed":"2.9.2-root.io.2"},{"fixed":"2.9.2-root.io.3"},{"fixed":"2.3.1-root.io.2"},{"fixed":"2.3.1-root.io.3"},{"fixed":"2.3.1-root.io.4"},{"fixed":"2.3.1-root.io.5"},{"fixed":"2.3.1-root.io.6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.2-1","2.2.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3ubuntu0.1~esm2"}]}],"versions":["2.4.2-2","2.4.2-3","2.4.2-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.6-1","2.9.1-1","2.9.4-1","2.9.5-1","2.9.8-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3ubuntu0.1~esm2"}]}],"versions":["2.4.2-2","2.4.2-3","2.4.2-3ubuntu0.1~esm1"],"bundled":39}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fasterxml","product":"jackson-databind"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"oncommand_api_services"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"service_level_manager"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"oracle","product":"banking_platform"},{"vendor":"oracle","product":"communications_billing_and_revenue_management"},{"vendor":"oracle","product":"communications_calendar_server"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_evolved_communications_application_server"},{"vendor":"oracle","product":"database_server"},{"vendor":"oracle","product":"global_lifecycle_management_nextgen_oui_framework"},{"vendor":"oracle","product":"goldengate_application_adapters"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_orchestrator"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_tools"},{"vendor":"oracle","product":"primavera_gateway"},{"vendor":"oracle","product":"primavera_unifier"},{"vendor":"oracle","product":"retail_merchandising_system"},{"vendor":"oracle","product":"retail_sales_audit"},{"vendor":"oracle","product":"siebel_engineering_-_installer_\\\u0026_deployment"},{"vendor":"oracle","product":"siebel_ui_framework"},{"vendor":"oracle","product":"webcenter_portal"},{"vendor":"oracle","product":"webcenter_sites"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2019/dsa-4542","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://seclists.org/bugtraq/2019/Oct/6","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report","web"]},{"url":"https://lists.apache.org/thread.html/b2e23c94f9dfef53e04c492e5d02e5c75201734be7adc73a49ef2370%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/7782a937c9259a58337ee36b2961f00e2d744feafc13084e176d0df5%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3901","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/a430dbc9be874c41314cc69e697384567a9a24025e819d9485547954%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0164","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0159","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0160","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0161","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0445","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/2478","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://issues.apache.org/jira/browse/GEODE-7255","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16942","tags":["advisory"]},{"url":"https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/7782a937c9259a58337ee36b2961f00e2d744feafc13084e176d0df5@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/a430dbc9be874c41314cc69e697384567a9a24025e819d9485547954@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b2e23c94f9dfef53e04c492e5d02e5c75201734be7adc73a49ef2370@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/328a0f833daf6baa443ac3b37c818a0204714b0b","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/54aa38d87dcffa5ccc23e64922e9536c82c1b9c8","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/9593e16cf5a3d289a9c584f7123639655de9ddac","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/bc67eb11a7cf57561f861ff16f879f1fceb5779f","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q7CANA7KV53JROZDX5Z5P26UG5VN2K43","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TH5VFUN4P7CCIP7KSEXYA5MUTFCUDUJT","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mx7p-6679-8g3q"},{"url":"https://access.redhat.com/errata/RHSA-2020:1644","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1535313","tags":["report"]},{"url":"https://bugzilla.redhat.com/1655438","tags":["report"]},{"url":"https://bugzilla.redhat.com/1656786","tags":["report"]},{"url":"https://bugzilla.redhat.com/1698084","tags":["report"]},{"url":"https://bugzilla.redhat.com/1744095","tags":["report"]},{"url":"https://bugzilla.redhat.com/1755831","tags":["report"]},{"url":"https://bugzilla.redhat.com/1755849","tags":["report"]},{"url":"https://bugzilla.redhat.com/1758187","tags":["report"]},{"url":"https://bugzilla.redhat.com/1758191","tags":["report"]},{"url":"https://bugzilla.redhat.com/1767125","tags":["report"]},{"url":"https://bugzilla.redhat.com/1767131","tags":["report"]},{"url":"https://bugzilla.redhat.com/1775293","tags":["report"]},{"url":"https://bugzilla.redhat.com/1777032","tags":["report"]},{"url":"https://bugzilla.redhat.com/1782486","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793154","tags":["report"]},{"url":"https://bugzilla.redhat.com/1795215","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802006","tags":["report"]},{"url":"https://bugzilla.redhat.com/1806840","tags":["report"]},{"url":"https://bugzilla.redhat.com/1807371","tags":["report"]},{"url":"https://bugzilla.redhat.com/1807421","tags":["report"]},{"url":"https://bugzilla.redhat.com/1809210","tags":["report"]},{"url":"https://bugzilla.redhat.com/1815470","tags":["report"]},{"url":"https://bugzilla.redhat.com/1815495","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816330","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816332","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816337","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816340","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1644.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-14540","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16335","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16942","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16943","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-17531","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20330","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10672","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10673","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-8840","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9546","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9547","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9548","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-16942","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0153.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25266","tags":["report"]},{"url":"https://www.debian.org/security/2019/dsa-4452","tags":["web"]},{"url":"https://www.debian.org/lts/security/2019/dla-2030","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4JYW4U272JPM7AYVNENNTWYYYAAQ4TZO/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2111","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2135","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2153","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2179","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1523","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2406","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4366","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-January/008253.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1738673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775293","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-17491","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17651","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17652","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17666","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17773","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17789","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17805","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17834","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17837","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17887","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17898","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17905","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17906","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17940","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17945","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17974","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17998","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18169","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18170","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10219","tags":["advisory"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14892","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14892","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16335","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16335","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16942","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16943","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17267","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17267","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17531","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17531","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17835","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0160.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17836","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0161.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809210","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1644.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20330","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8840","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1815495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10672","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1815470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10673","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10673","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1644","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-16942","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4813-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17531","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14195","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20190","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-16942","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T16:04:26Z","modified":"2026-10-08T21:03:12.241Z","updated_at":"2026-11-02T14:32:23.485011Z"}],"euvd":[{"id":"EUVD-2019-0709","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T16:04:26Z","modified":"2026-10-08T21:03:12Z","updated_at":"2026-11-02T17:27:27.240961Z"}],"ghsa":[{"id":"GHSA-mx7p-6679-8g3q","title":"Polymorphic Typing in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-28T20:51:15Z","modified":"2024-03-15T00:57:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:37:40.81935Z"}],"nvd":[{"id":"CVE-2019-16942","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T17:15:10.323Z","modified":"2026-10-08T21:17:16.54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:05:30.039477Z"}],"osv":[{"id":"CVE-2019-16942","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T17:15:10.323Z","modified":"2026-10-24T10:49:50.329954041Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-16942","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T17:15:10.323Z","modified":"2026-10-09T09:47:36.313823043Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"GHSA-mx7p-6679-8g3q","title":"Polymorphic Typing in FasterXML jackson-databind","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-28T20:51:15Z","modified":"2024-03-15T01:01:46.432481Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RHSA-2020:0159","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 6 security update","status":"published","published":"2024-09-29T17:24:46Z","modified":"2026-10-13T10:01:37Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0160","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 7 security update","status":"published","published":"2024-09-29T17:25:04Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0161","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 8 security update","status":"published","published":"2024-09-29T17:25:13Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1644","title":"Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:39:57Z","modified":"2026-10-09T10:01:42Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RLSA-2020:1644","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)\n\n* jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)\n\n* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:00:20Z","modified":"2026-02-04T10:00:03.92525Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-16942","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.","status":"published","published":"2019-10-01T17:15:00Z","modified":"2026-02-04T02:54:32.487127Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2020:1644","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)\n\n* jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)\n\n* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:00:20Z","modified":"2026-10-29T11:12:08.3061034Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1793208072","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (31 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 31 CVEs. Fixed in 2.5.4-tuxcare.2.","status":"published","published":"2026-10-28T17:21:12Z","modified":"2026-11-06T13:28:02.042118205Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793360883","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.7.5-tuxcare.3.","status":"published","published":"2026-10-30T12:48:04Z","modified":"2026-11-06T13:28:07.752416828Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793520627","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.9.10-tuxcare.3.","status":"published","published":"2026-11-01T09:10:27Z","modified":"2026-11-01T14:30:06.302635624Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"CLSA-2026-1793521240","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (16 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 16 CVEs. Fixed in 2.9.9.3-tuxcare.2.","status":"published","published":"2026-11-01T09:20:41Z","modified":"2026-11-01T14:30:06.202675037Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"CLSA-2026-1793521629","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (21 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 21 CVEs. Fixed in 2.7.9-tuxcare.4.","status":"published","published":"2026-11-01T09:27:10Z","modified":"2026-11-06T13:28:02.382359899Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793866208","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.8.7-tuxcare.6.","status":"published","published":"2026-11-05T09:10:09Z","modified":"2026-11-05T13:15:03.277963123Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793866444","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.7.0-tuxcare.4.","status":"published","published":"2026-11-05T09:14:05Z","modified":"2026-11-05T13:15:02.300438265Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793866586","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (16 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 16 CVEs. Fixed in 2.7.9.3-tuxcare.4.","status":"published","published":"2026-11-05T09:16:27Z","modified":"2026-11-05T13:15:02.285696759Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793867418","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (12 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 12 CVEs. Fixed in 2.8.5-tuxcare.5.","status":"published","published":"2026-11-05T09:30:19Z","modified":"2026-11-05T13:15:06.048702149Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793867830","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (9 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 9 CVEs. Fixed in 2.8.4-tuxcare.6.","status":"published","published":"2026-11-05T09:37:11Z","modified":"2026-11-05T13:15:03.277266293Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793868351","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.7.3-tuxcare.4.","status":"published","published":"2026-11-05T09:45:52Z","modified":"2026-11-05T13:15:06.043643166Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793869592","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.7.1-tuxcare.6.","status":"published","published":"2026-11-05T10:06:33Z","modified":"2026-11-05T13:15:06.497418517Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793870384","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.9.9.1-tuxcare.5.","status":"published","published":"2026-11-05T10:19:45Z","modified":"2026-11-05T13:15:08.25412597Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"CLSA-2026-1793957775","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (11 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 11 CVEs. Fixed in 2.8.11-tuxcare.6.","status":"published","published":"2026-11-06T10:36:15Z","modified":"2026-11-06T13:15:14.77804091Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794221834","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (22 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 22 CVEs. Fixed in 2.9.8-tuxcare.5.","status":"published","published":"2026-11-09T11:57:15Z","modified":"2026-11-09T19:15:05.428737975Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794222386","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (13 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 13 CVEs. Fixed in 2.8.11.4-tuxcare.5.","status":"published","published":"2026-11-09T12:06:27Z","modified":"2026-11-09T19:15:09.533317993Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794223842","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (20 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 20 CVEs. Fixed in 2.9.3-tuxcare.7.","status":"published","published":"2026-11-09T12:30:43Z","modified":"2026-11-09T19:15:09.539297121Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794223928","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (15 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 15 CVEs. Fixed in 2.9.5-tuxcare.5.","status":"published","published":"2026-11-09T12:32:10Z","modified":"2026-11-09T19:15:03.930133437Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794223990","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (14 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 14 CVEs. Fixed in 2.8.11.3-tuxcare.5.","status":"published","published":"2026-11-09T12:33:10Z","modified":"2026-11-09T19:15:08.71813093Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794224575","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (15 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 15 CVEs. Fixed in 2.9.9-tuxcare.4.","status":"published","published":"2026-11-09T12:42:56Z","modified":"2026-11-09T19:15:03.892515361Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794225259","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (19 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 19 CVEs. Fixed in 2.9.1-tuxcare.4.","status":"published","published":"2026-11-09T12:54:20Z","modified":"2026-11-09T19:15:02.893164762Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794225369","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (18 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 18 CVEs. Fixed in 2.9.7-tuxcare.5.","status":"published","published":"2026-11-09T12:56:10Z","modified":"2026-11-09T19:15:08.722624956Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794225652","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (18 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 18 CVEs. Fixed in 2.9.4-tuxcare.6.","status":"published","published":"2026-11-09T13:00:53Z","modified":"2026-11-09T19:15:02.893434073Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794226255","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.4.1.1-tuxcare.4.","status":"published","published":"2026-11-09T13:10:56Z","modified":"2026-11-09T19:15:05.33552214Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794228139","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.8.10-tuxcare.7.","status":"published","published":"2026-11-09T13:42:20Z","modified":"2026-11-09T19:15:03.890964483Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"CLSA-2026-1794233060","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (23 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 23 CVEs. Fixed in 2.9.2-tuxcare.5.","status":"published","published":"2026-11-09T15:04:21Z","modified":"2026-11-09T19:15:09.637204375Z","updated_at":"2026-11-09T19:38:09.278998Z"},{"id":"DLA-1943-1","title":"jackson-databind - security update","status":"published","published":"2019-10-02T00:00:00Z","modified":"2026-03-09T01:17:58.351445Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4542-1","title":"jackson-databind - security update","status":"published","published":"2019-10-06T00:00:00Z","modified":"2026-03-09T02:08:39.515187Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2021-0153","title":"Updated jackson-databind packages fix security vulnerabilities","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nbefore 2.9.9. When Default Typing is enabled (either globally or for a specific\nproperty) for an externally exposed JSON endpoint, the service has the\nmysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker\ncan host a crafted MySQL server reachable by the victim, an attacker can send\na crafted JSON message that allows them to read arbitrary local files on the\nserver. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin\nvalidation (CVE-2019-12086).\n\nFasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a\nvariety of impacts by leveraging failure to block the logback-core class from\npolymorphic deserialization. Depending on the classpath content, remote code\nexecution may be possible (CVE-2019-12384).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nthrough 2.9.9. When Default Typing is enabled (either globally or for a specific\nproperty) for an externally exposed JSON endpoint and the service has JDOM\n1.x or 2.x jar in the classpath, an attacker can send a specifically crafted\nJSON message that allows them to read arbitrary local files on the server\n(CVE-2019-12814).\n\nSubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles\ndefault typing when ehcache is used (because of\nnet.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup),\nleading to remote code execution (CVE-2019-14379).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nbefore 2.9.9.2. This occurs when Default Typing is enabled (either globally or\nfor a specific property) for an externally exposed JSON endpoint and the\nservice has the logback jar in the classpath (CVE-2019-14439).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to com.zaxxer.hikari.HikariConfig (CVE-2019-14540).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different\nvulnerability than CVE-2019-14540 (CVE-2019-16335).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has\nthe commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI\nservice endpoint to access, it is possible to make the service execute a\nmalicious payload. This issue exists because of\norg.apache.commons.dbcp.datasources.SharedPoolDataSource and\norg.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling\n(CVE-2019-16942).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has\nthe p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI\nservice endpoint to access, it is possible to make the service execute a\nmalicious payload. This issue exists because of\ncom.p6spy.engine.spy.P6DataSource mishandling (CVE-2019-16943).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to\nnet.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup (CVE-2019-17267).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has \nthe apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker\ncan provide a JNDI service to access, it is possible to make the service\nexecute a malicious payload (CVE-2019-17531).\n\nFasterXML jackson-databind 2.x before 2.9.10.2 lacks certain\nnet.sf.ehcache blocking (CVE-2019-20330).\n\nFasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI\nblocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter\n(CVE-2020-8840).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config)\n(CVE-2020-9546).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap)\n(CVE-2020-9547).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\nbr.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core) (CVE-2020-9548).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.aries.transaction.jms.internal.XaPooledConnectionFactory\n(aka aries.transaction.jms) (CVE-2020-10672).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.caucho.config.types.ResourceRef (aka caucho-quercus) (CVE-2020-10673).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy)\n(CVE-2020-10968).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to javax.swing.JEditorPane\n(CVE-2020-10969).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to org.apache.activemq.*\n(aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms)\n(CVE-2020-11111). \n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.commons.proxy.provider.remoting.RmiProvider\n(aka apache/commons-proxy) (CVE-2020-11112).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa) (CVE-2020-11113).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop)\n(CVE-2020-11619).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.commons.jelly.impl.Embedded (aka commons-jelly) (CVE-2020-11620).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between\nserialization gadgets and typing, related to\noadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill)\n(CVE-2020-14060).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\noracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory,\noracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory,\nand oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).\n(CVE-2020-14061).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2)\n(CVE-2020-14062).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity) (CVE-2020-14195).\n\nA flaw was found in FasterXML Jackson Databind, where it did not have entity\nexpansion secured properly. This flaw allows vulnerability to XML external\nentity (XXE) attacks. The highest threat from this vulnerability is data\nintegrity (CVE-2020-25649).\n\nFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded\nXalan in org.glassfish.web/javax.servlet.jsp.jstl) (CVE-2020-35728).\n\nA flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles\nthe interaction between serialization gadgets and typing. The highest threat\nfrom this vulnerability is to data confidentiality and integrity as well as\nsystem availability (CVE-2021-20190).\n","status":"published","published":"2021-03-27T14:27:02Z","modified":"2026-04-16T04:44:25.952391772Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:10868-1","title":"jackson-databind-2.10.5.1-2.2 on GA media","description":"These are all security issues fixed in the jackson-databind-2.10.5.1-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:58.422529Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"ROOT-APP-MAVEN-CVE-2019-16942","title":"CVE-2019-16942 in com.fasterxml.jackson.core:jackson-databind - Patched by Root","description":"Root has patched CVE-2019-16942 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-08-24T12:30:14Z","modified":"2026-08-24T14:30:20.311635938Z","updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"USN-4813-1","title":"jackson-databind vulnerabilities","description":"It was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to obtain\nsensitive information. (CVE-2018-11307, CVE-2019-12086, CVE-2019-12814)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\narbitrary code or other unspecified impact. (CVE-2018-12022,\nCVE-2018-12023, CVE-2018-14718, CVE-2018-14719, CVE-2018-19360,\nCVE-2018-19361, CVE-2018-19362, CVE-2019-12384, CVE-2019-14379,\nCVE-2019-14439, CVE-2019-14540, CVE-2019-16335, CVE-2019-16942,\nCVE-2019-16943, CVE-2019-17267, CVE-2019-17531, CVE-2019-20330,\nCVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969,\nCVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619,\nCVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062,\nCVE-2020-14195, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute XML\nentity (XXE) attacks. (CVE-2018-14720)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\nserver-side request forgery (SSRF). (CVE-2018-14721)\n","status":"published","published":"2021-03-15T21:47:52Z","modified":"2026-10-12T14:20:21.353062163Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}