{"id":"CVE-2019-17531","aliases":["ALSA-2020:1644","CLSA-2026-1793618702","CLSA-2026-1793870822","DEBIAN-CVE-2019-17531","DLA-2030-1","EUVD-2019-0750","GHSA-gjmw-vf9h-g25v","MGASA-2021-0153","OESA-2022-1782","RHSA-2019:4192","RHSA-2020:0159","RHSA-2020:0160","RHSA-2020:0161","RHSA-2020:1644","RHSA-2024:5856","RLSA-2020:1644","ROOT-APP-MAVEN-CVE-2019-17531","UBUNTU-CVE-2019-17531","USN-4813-1","openSUSE-SU-2024:10868-1"],"status":"published","title":"jackson-databind polymorphic typing issue","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05373,"percentile":0.92712,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-502"],"published":"2019-10-12T20:07:34Z","modified":"2026-11-05T13:15:10Z","fixes":[{"ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.10.1","2.8.11.5","2.6.7.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"jackson-databind","fixed_in":["2.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jackson-databind","fixed_in":["2.10.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jackson-databind","fixed_in":["2.10.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"jackson-databind","fixed_in":["2.9.8-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"jackson-databind","fixed_in":["2.9.8-8.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-jackson-databind","fixed_in":["0:2.7.6-2.8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-jackson-databind-javadoc","fixed_in":["0:2.7.6-2.8.el7"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.3.1-aikido.2","2.3.1-aikido.3","2.3.1-aikido.4","2.3.1-aikido.5","2.3.1-aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.5.2-root.io.2","2.3.1-root.io.2","2.3.1-root.io.3","2.3.1-root.io.4","2.3.1-root.io.5","2.3.1-root.io.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","fixed_in":["2.4.2-3ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.8.11.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.7.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-10.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-21.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-16.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-9.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-11.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.9-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.9-1.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-nss-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-10.module_el8.5.0+2577+9e95fe00.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-10.module_el8.5.0+2577+9e95fe00.alma"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2011.1-7.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-24.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-38.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-34.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.01-25.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-26.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-8.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0-19.20110809svn.module_el8.5.0+2577+9e95fe00"}]}],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.10"},{"fixed":"2.9.10-tuxcare.4"}]}],"versions":["2.9.10","2.9.10-tuxcare.1","2.9.10-tuxcare.2","2.9.10-tuxcare.3"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.9.3"},{"fixed":"2.9.9.3-tuxcare.5"}]}],"versions":["2.9.9.3","2.9.9.3-tuxcare.1","2.9.9.3-tuxcare.2","2.9.9.3-tuxcare.3","2.9.9.3-tuxcare.4"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-2+deb8u10"}]}],"versions":["2.4.2-2","2.4.2-2+deb8u1","2.4.2-2+deb8u2","2.4.2-2+deb8u3","2.4.2-2+deb8u4","2.4.2-2+deb8u5","2.4.2-2+deb8u6","2.4.2-2+deb8u7","2.4.2-2+deb8u8","2.4.2-2+deb8u9"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.0"},{"fixed":"2.9.10.1"}]}],"versions":["2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.10","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","2.9.9.1","2.9.9.2","2.9.9.3"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.0"},{"fixed":"2.8.11.5"}]}],"versions":["2.7.0","2.7.1","2.7.1-1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.7.9.1","2.7.9.2","2.7.9.3","2.7.9.4","2.7.9.5","2.7.9.6","2.7.9.7","2.8.0","2.8.0.rc1","2.8.0.rc2","2.8.1","2.8.10","2.8.11","2.8.11.1","2.8.11.2","2.8.11.3","2.8.11.4","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.8.1","2.8.9"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.7.3"}]}],"versions":["2.0.0","2.0.0-RC1","2.0.0-RC2","2.0.0-RC3","2.0.1","2.0.2","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.2.0","2.2.0-rc1","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-rc1","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.0-rc1","2.4.0-rc2","2.4.0-rc3","2.4.1","2.4.1.1","2.4.1.2","2.4.1.3","2.4.2","2.4.3","2.4.4","2.4.5","2.4.5.1","2.4.6","2.4.6.1","2.5.0","2.5.0-rc1","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.6.0","2.6.0-rc1","2.6.0-rc2","2.6.0-rc3","2.6.0-rc4","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.7.1","2.6.7.2"]},{"source":"osv","ecosystem":"Mageia:7","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-1.2.mga7"}]}],"bundled":32},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-8.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-2.8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-jackson-databind-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-2.8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el6","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el6eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el7eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.11-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-6.SP3_redhat_00004.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.19-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.14-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.18-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10.1-1.redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-dataformats-text","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-2.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.10-1.redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-jsf-api_2.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap6.4-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly11.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly12.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.Final_redhat_00007.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.6-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.42-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-21.SP12_redhat_00010.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.28-2.SP1_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-undertow-jastow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-core-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-ejb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-jta","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-probe-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-weld-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.6-3.Final_redhat_00003.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.18-2.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.6-5.GA_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.2::el8","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.8-1.Final_redhat_00001.1.el8eap"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.2.0+5059+3eb3af25"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.1.0+3832+9784644d"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.1.0+3832+9784644d"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jss-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-4.module+el8.2.0+6123+b4678599"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ldapjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-base-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-ca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-core-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-kra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-4.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.7-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.7-16.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-symkey-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-nss-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-nss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.8.3-1.module+el8.2.0+5925+bad5981a"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-3.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.1-2.module+el8.2.0+4573+c3c38c7b"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-1.redhat_00002.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.11-1.SP2_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.11.5-1.redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.Final_redhat_00002.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.45-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.45-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-12.SP12_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.7-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.13-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.7-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":21},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-11.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.0-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.9-1.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.6-4.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-10.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-3.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.5.0+697+f586bb30"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+133+b8b54b58"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.5.0+697+f586bb30"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+74+855e3f5d"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.3.0+53+ea062990"}]}],"bundled":12},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-aikido.2"},{"fixed":"2.3.1-aikido.3"},{"fixed":"2.3.1-aikido.4"},{"fixed":"2.3.1-aikido.5"},{"fixed":"2.3.1-aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-root.io.2"},{"fixed":"2.3.1-root.io.2"},{"fixed":"2.3.1-root.io.3"},{"fixed":"2.3.1-root.io.4"},{"fixed":"2.3.1-root.io.5"},{"fixed":"2.3.1-root.io.6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.2-1","2.2.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3ubuntu0.1~esm2"}]}],"versions":["2.4.2-2","2.4.2-3","2.4.2-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.6-1","2.9.1-1","2.9.4-1","2.9.5-1","2.9.8-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3ubuntu0.1~esm2"}]}],"versions":["2.4.2-2","2.4.2-3","2.4.2-3ubuntu0.1~esm1"],"bundled":39}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fasterxml","product":"jackson-databind"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"oracle","product":"banking_platform"},{"vendor":"oracle","product":"communications_billing_and_revenue_management"},{"vendor":"oracle","product":"communications_calendar_server"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_evolved_communications_application_server"},{"vendor":"oracle","product":"global_lifecycle_management_nextgen_oui_framework"},{"vendor":"oracle","product":"goldengate_application_adapters"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_orchestrator"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_tools"},{"vendor":"oracle","product":"primavera_gateway"},{"vendor":"oracle","product":"retail_merchandising_system"},{"vendor":"oracle","product":"retail_sales_audit"},{"vendor":"oracle","product":"siebel_engineering_-_installer_\\\u0026_deployment"},{"vendor":"oracle","product":"trace_file_analyzer"},{"vendor":"oracle","product":"webcenter_portal"},{"vendor":"oracle","product":"webcenter_sites"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"}],"references":[{"url":"https://lists.apache.org/thread.html/b3c90d38f99db546de60fea65f99a924d540fae2285f014b79606ca5%40%3Ccommits.pulsar.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4192","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/12/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f%40%3Ccommits.druid.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0164","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0159","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0160","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0161","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0445","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://medium.com/%40cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/2498","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://security.netapp.com/advisory/ntap-20191024-0005/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2%40%3Cissues.geode.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17531","tags":["advisory"]},{"url":"https://medium.com/@cowtowncoder/on-jackson-cves-dont-panic-here-is-what-you-need-to-know-54cd0d6e8062","tags":["web","report"]},{"url":"https://lists.apache.org/thread.html/b3c90d38f99db546de60fea65f99a924d540fae2285f014b79606ca5@%3Ccommits.pulsar.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r392099ed2757ff2e383b10440594e914d080511d7da1c8fed0612c1f@%3Ccommits.druid.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rf1bbc0ea4a9f014cf94df9a12a6477d24a27f52741dbc87f2fd52ff2@%3Cissues.geode.apache.org%3E","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/b5a304a98590b6bb766134f9261e6566dcbbb6d0","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-gjmw-vf9h-g25v"},{"url":"https://access.redhat.com/errata/RHSA-2020:1644","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1535313","tags":["report"]},{"url":"https://bugzilla.redhat.com/1655438","tags":["report"]},{"url":"https://bugzilla.redhat.com/1656786","tags":["report"]},{"url":"https://bugzilla.redhat.com/1698084","tags":["report"]},{"url":"https://bugzilla.redhat.com/1744095","tags":["report"]},{"url":"https://bugzilla.redhat.com/1755831","tags":["report"]},{"url":"https://bugzilla.redhat.com/1755849","tags":["report"]},{"url":"https://bugzilla.redhat.com/1758187","tags":["report"]},{"url":"https://bugzilla.redhat.com/1758191","tags":["report"]},{"url":"https://bugzilla.redhat.com/1767125","tags":["report"]},{"url":"https://bugzilla.redhat.com/1767131","tags":["report"]},{"url":"https://bugzilla.redhat.com/1775293","tags":["report"]},{"url":"https://bugzilla.redhat.com/1777032","tags":["report"]},{"url":"https://bugzilla.redhat.com/1782486","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793154","tags":["report"]},{"url":"https://bugzilla.redhat.com/1795215","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802006","tags":["report"]},{"url":"https://bugzilla.redhat.com/1806840","tags":["report"]},{"url":"https://bugzilla.redhat.com/1807371","tags":["report"]},{"url":"https://bugzilla.redhat.com/1807421","tags":["report"]},{"url":"https://bugzilla.redhat.com/1809210","tags":["report"]},{"url":"https://bugzilla.redhat.com/1815470","tags":["report"]},{"url":"https://bugzilla.redhat.com/1815495","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816330","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816332","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816337","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816340","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-1644.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-14540","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16335","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16942","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-16943","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-17531","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-20330","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10672","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-10673","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-8840","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9546","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9547","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-9548","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17531","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191024-0005","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2021-0153.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25266","tags":["report"]},{"url":"https://www.debian.org/security/2019/dsa-4452","tags":["web"]},{"url":"https://www.debian.org/security/2019/dsa-4542","tags":["web"]},{"url":"https://www.debian.org/lts/security/2019/dla-2030","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/UKUALE2TUCKEKOHE2D342PQXN4MWCSLC/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4JYW4U272JPM7AYVNENNTWYYYAAQ4TZO/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2111","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2135","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2153","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2179","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1523","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2406","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4366","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-January/008253.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6X2UT4X6M7DLQYBOOHMXBWGYJ65RL2CT/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1782","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775293","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4192.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17531","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1738673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772464","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-17491","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17541","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17651","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17652","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17666","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17773","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17779","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17789","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17805","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17834","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17837","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17887","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17898","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17905","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17906","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17940","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17945","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17974","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-17998","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18169","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-18170","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0159.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10219","tags":["advisory"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/124b7dd6d9a4ad24d4d49f74701f05a13e56cee","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/20d729548511ac5cff6fd459f93de137195420fe","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14892","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14892","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14892","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16335","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16335","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16869","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16942","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16942","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-16943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-16943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-16943","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-17267","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17267","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17835","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0160.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-17836","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0161.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1535313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1698084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809210","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1644.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20330","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8840","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8840","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9546","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9547","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9547","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816340","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9548","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9548","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1815495","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10672","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10672","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1815470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10673","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10673","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:5856","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1735745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-24826","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5856.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9511","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9511","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9511","tags":["advisory"]},{"url":"https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md","tags":["article"]},{"url":"https://kb.cert.org/vuls/id/605641/","tags":["article"]},{"url":"https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/","tags":["article"]},{"url":"https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9512","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9512","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9512","tags":["advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/65QixT3tcmg","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/kubernetes-security-announce/wlHLHit1BqA","tags":["article"]},{"url":"https://www.mail-archive.com/grpc-io@googlegroups.com/msg06408.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9514","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9514","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9514","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9515","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10086","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10086","tags":["advisory"]},{"url":"https://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.4/RELEASE-NOTES.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10174","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10174","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-12384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20444","tags":["advisory"]},{"url":"https://github.com/elastic/elasticsearch/issues/49396","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20445","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1745","tags":["advisory"]},{"url":"https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/","tags":["article"]},{"url":"https://www.cnvd.org.cn/webinfo/show/5415","tags":["article"]},{"url":"https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1757","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","tags":["advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","tags":["article"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","tags":["article"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23302","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23302","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23302","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/3","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2020:1644","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-17531","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4813-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-11307","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12022","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14718","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14719","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14720","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14721","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19361","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19362","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12384","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12814","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14540","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-16943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17267","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-8840","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-9548","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10968","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10969","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11111","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11112","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11113","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11619","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-11620","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14060","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14061","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14062","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14195","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12023","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20190","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-17531","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T20:07:34Z","modified":"2026-10-08T20:53:03.848Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-0750","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T20:07:34Z","modified":"2026-10-08T20:53:03Z","updated_at":"2026-11-02T17:27:27.72962Z"}],"ghsa":[{"id":"GHSA-gjmw-vf9h-g25v","title":"jackson-databind polymorphic typing issue","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 prior to 2.9.10.1, 2.8.11.5, and 2.6.7.3. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload. ","status":"published","published":"2019-11-13T00:32:38Z","modified":"2023-09-14T14:55:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:37:05.567008Z"}],"nvd":[{"id":"CVE-2019-17531","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T21:15:08.57Z","modified":"2026-10-08T21:17:16.95Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"CVE-2019-17531","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T21:15:08.57Z","modified":"2026-10-24T10:47:42.214188678Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17531","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T21:15:08.57Z","modified":"2026-10-09T09:47:24.234402042Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"GHSA-gjmw-vf9h-g25v","title":"jackson-databind polymorphic typing issue","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 prior to 2.9.10.1, 2.8.11.5, and 2.6.7.3. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload. ","status":"published","published":"2019-11-13T00:32:38Z","modified":"2024-03-16T05:19:37.211801Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:46:47.822182Z"},{"id":"OESA-2022-1782","title":"jackson-databind security update","description":"The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.\r\n\r\nSecurity Fix(es):\r\n\r\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.(CVE-2019-17531)","status":"published","published":"2022-07-26T11:05:03Z","modified":"2026-08-18T01:16:51.336951709Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2019:4192","title":"Red Hat Security Advisory: rh-maven35-jackson-databind security update","status":"published","published":"2024-09-13T16:15:23Z","modified":"2026-08-05T10:06:50Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0159","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 6 security update","status":"published","published":"2024-09-29T17:24:46Z","modified":"2026-10-13T10:01:37Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0160","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 7 security update","status":"published","published":"2024-09-29T17:25:04Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0161","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.6 on RHEL 8 security update","status":"published","published":"2024-09-29T17:25:13Z","modified":"2026-10-13T10:01:38Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1644","title":"Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:39:57Z","modified":"2026-10-09T10:01:42Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2024:5856","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update","status":"published","published":"2024-09-29T18:52:22Z","modified":"2026-10-13T10:07:29Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RLSA-2020:1644","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)\n\n* jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)\n\n* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:00:20Z","modified":"2026-02-04T10:00:03.92525Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2019-17531","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.","status":"published","published":"2019-10-12T21:15:00Z","modified":"2026-02-04T04:16:37.415964Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"ALSA-2020:1644","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig (CVE-2019-14540)\n\n* jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariDataSource (CVE-2019-16335)\n\n* jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.* (CVE-2019-16942)\n\n* jackson-databind: Serialization gadgets in com.p6spy.engine.spy.P6DataSource (CVE-2019-16943)\n\n* jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-04-28T09:00:20Z","modified":"2026-10-29T11:12:08.3061034Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2026-1793618702","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 2 CVEs. Fixed in 2.9.10-tuxcare.4.","status":"published","published":"2026-11-02T12:25:03Z","modified":"2026-11-02T19:46:33.346722682Z","updated_at":"2026-11-02T20:28:42.34712Z"},{"id":"CLSA-2026-1793870822","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.9.9.3-tuxcare.5.","status":"published","published":"2026-11-05T10:27:03Z","modified":"2026-11-05T13:15:10.178688595Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"DLA-2030-1","title":"jackson-databind - security update","status":"published","published":"2019-12-10T00:00:00Z","modified":"2026-03-09T01:21:11.92611Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2021-0153","title":"Updated jackson-databind packages fix security vulnerabilities","description":"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nbefore 2.9.9. When Default Typing is enabled (either globally or for a specific\nproperty) for an externally exposed JSON endpoint, the service has the\nmysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker\ncan host a crafted MySQL server reachable by the victim, an attacker can send\na crafted JSON message that allows them to read arbitrary local files on the\nserver. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin\nvalidation (CVE-2019-12086).\n\nFasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a\nvariety of impacts by leveraging failure to block the logback-core class from\npolymorphic deserialization. Depending on the classpath content, remote code\nexecution may be possible (CVE-2019-12384).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nthrough 2.9.9. When Default Typing is enabled (either globally or for a specific\nproperty) for an externally exposed JSON endpoint and the service has JDOM\n1.x or 2.x jar in the classpath, an attacker can send a specifically crafted\nJSON message that allows them to read arbitrary local files on the server\n(CVE-2019-12814).\n\nSubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles\ndefault typing when ehcache is used (because of\nnet.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup),\nleading to remote code execution (CVE-2019-14379).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x\nbefore 2.9.9.2. This occurs when Default Typing is enabled (either globally or\nfor a specific property) for an externally exposed JSON endpoint and the\nservice has the logback jar in the classpath (CVE-2019-14439).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to com.zaxxer.hikari.HikariConfig (CVE-2019-14540).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different\nvulnerability than CVE-2019-14540 (CVE-2019-16335).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has\nthe commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI\nservice endpoint to access, it is possible to make the service execute a\nmalicious payload. This issue exists because of\norg.apache.commons.dbcp.datasources.SharedPoolDataSource and\norg.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling\n(CVE-2019-16942).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has\nthe p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI\nservice endpoint to access, it is possible to make the service execute a\nmalicious payload. This issue exists because of\ncom.p6spy.engine.spy.P6DataSource mishandling (CVE-2019-16943).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind before\n2.9.10. It is related to\nnet.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup (CVE-2019-17267).\n\nA Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0\nthrough 2.9.10. When Default Typing is enabled (either globally or for a\nspecific property) for an externally exposed JSON endpoint and the service has \nthe apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker\ncan provide a JNDI service to access, it is possible to make the service\nexecute a malicious payload (CVE-2019-17531).\n\nFasterXML jackson-databind 2.x before 2.9.10.2 lacks certain\nnet.sf.ehcache blocking (CVE-2019-20330).\n\nFasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI\nblocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter\n(CVE-2020-8840).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config)\n(CVE-2020-9546).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap)\n(CVE-2020-9547).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\nbr.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core) (CVE-2020-9548).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.aries.transaction.jms.internal.XaPooledConnectionFactory\n(aka aries.transaction.jms) (CVE-2020-10672).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.caucho.config.types.ResourceRef (aka caucho-quercus) (CVE-2020-10673).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy)\n(CVE-2020-10968).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to javax.swing.JEditorPane\n(CVE-2020-10969).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to org.apache.activemq.*\n(aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms)\n(CVE-2020-11111). \n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.commons.proxy.provider.remoting.RmiProvider\n(aka apache/commons-proxy) (CVE-2020-11112).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa) (CVE-2020-11113).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop)\n(CVE-2020-11619).\n\nFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.apache.commons.jelly.impl.Embedded (aka commons-jelly) (CVE-2020-11620).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between\nserialization gadgets and typing, related to\noadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill)\n(CVE-2020-14060).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\noracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory,\noracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory,\nand oracle.jms.AQjmsXAConnectionFactory (aka weblogic/oracle-aqjms).\n(CVE-2020-14061).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2)\n(CVE-2020-14062).\n\nFasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction\nbetween serialization gadgets and typing, related to\norg.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity) (CVE-2020-14195).\n\nA flaw was found in FasterXML Jackson Databind, where it did not have entity\nexpansion secured properly. This flaw allows vulnerability to XML external\nentity (XXE) attacks. The highest threat from this vulnerability is data\nintegrity (CVE-2020-25649).\n\nFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction\nbetween serialization gadgets and typing, related to\ncom.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded\nXalan in org.glassfish.web/javax.servlet.jsp.jstl) (CVE-2020-35728).\n\nA flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles\nthe interaction between serialization gadgets and typing. The highest threat\nfrom this vulnerability is to data confidentiality and integrity as well as\nsystem availability (CVE-2021-20190).\n","status":"published","published":"2021-03-27T14:27:02Z","modified":"2026-04-16T04:44:25.952391772Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:10868-1","title":"jackson-databind-2.10.5.1-2.2 on GA media","description":"These are all security issues fixed in the jackson-databind-2.10.5.1-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:58.422529Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"ROOT-APP-MAVEN-CVE-2019-17531","title":"CVE-2019-17531 in com.fasterxml.jackson.core:jackson-databind - Patched by Root","description":"Root has patched CVE-2019-17531 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-08-24T12:30:14Z","modified":"2026-08-24T14:30:19.004915561Z","updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"USN-4813-1","title":"jackson-databind vulnerabilities","description":"It was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to obtain\nsensitive information. (CVE-2018-11307, CVE-2019-12086, CVE-2019-12814)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\narbitrary code or other unspecified impact. (CVE-2018-12022,\nCVE-2018-12023, CVE-2018-14718, CVE-2018-14719, CVE-2018-19360,\nCVE-2018-19361, CVE-2018-19362, CVE-2019-12384, CVE-2019-14379,\nCVE-2019-14439, CVE-2019-14540, CVE-2019-16335, CVE-2019-16942,\nCVE-2019-16943, CVE-2019-17267, CVE-2019-17531, CVE-2019-20330,\nCVE-2020-10672, CVE-2020-10673, CVE-2020-10968, CVE-2020-10969,\nCVE-2020-11111, CVE-2020-11112, CVE-2020-11113, CVE-2020-11619,\nCVE-2020-11620, CVE-2020-14060, CVE-2020-14061, CVE-2020-14062,\nCVE-2020-14195, CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute XML\nentity (XXE) attacks. (CVE-2018-14720)\n\nIt was discovered that Jackson Databind incorrectly handled\ndeserialization. An attacker could possibly use this issue to execute\nserver-side request forgery (SSRF). (CVE-2018-14721)\n","status":"published","published":"2021-03-15T21:47:52Z","modified":"2026-10-12T14:20:21.353062163Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}