{"id":"CVE-2020-36518","aliases":["ALSA-2023:2312","ALSA-2024:3061","CLSA-2025-1760018305","CLSA-2025-1764858279","CLSA-2026-1776386160","CLSA-2026-1791782090","CLSA-2026-1792441757","CLSA-2026-1792514818","CLSA-2026-1792514845","CLSA-2026-1792517970","CLSA-2026-1792517981","DEBIAN-CVE-2020-36518","DLA-2990-1","DLA-3207-1","DSA-5283-1","EUVD-2022-1319","GHSA-57j2-w4cx-62h2","MGASA-2024-0069","OESA-2023-1921","OESA-2023-1971","RHLW-2026-dd1828f1f23f1ae5","RHSA-2022:4918","RHSA-2022:4919","RHSA-2022:6782","RHSA-2022:6783","RHSA-2022:7409","RHSA-2022:7410","RHSA-2022:7411","RHSA-2023:2312","RHSA-2024:3061","RHSA-2025:9582","RHSA-2025:9583","RLSA-2024:3061","ROOT-APP-MAVEN-CVE-2020-36518","SUSE-SU-2022:1678-1","UBUNTU-CVE-2020-36518","openSUSE-SU-2024:12096-1","openSUSE-SU-2024:12100-1","openSUSE-SU-2024:12101-1"],"status":"published","title":"Deeply nested json in jackson-databind","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0486,"percentile":0.92159,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2022-03-11T00:00:00Z","modified":"2026-10-29T11:30:52Z","exploits":[{"source":"pocgithub","id":"ghillert/boot-jackson-cve","title":"ghillert/boot-jackson-cve","date":"2022-03-21","url":"https://github.com/ghillert/boot-jackson-cve"}],"fixes":[{"ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.13.2.1","2.12.6.1"],"sources":["ghsa","osv"]},{"ecosystem":"AlmaLinux:9","package":"pki-jackson-databind","fixed_in":["2.14.1-2.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"apache-commons-collections","fixed_in":["3.2.2-10.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"apache-commons-lang","fixed_in":["2.6-21.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"apache-commons-net","fixed_in":["3.6-3.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bea-stax-api","fixed_in":["1.2.0-16.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"fasterxml-oss-parent","fixed_in":["49-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"glassfish-fastinfoset","fixed_in":["1.2.13-9.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-api","fixed_in":["2.2.12-8.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-core","fixed_in":["2.2.11-12.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-runtime","fixed_in":["2.2.11-12.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-txw2","fixed_in":["2.2.11-12.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-annotations","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-bom","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-core","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-databind","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-json-provider","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-providers","fixed_in":["2.14.2-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-module-jaxb-annotations","fixed_in":["2.14.2-2.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-modules-base","fixed_in":["2.14.2-2.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jackson-parent","fixed_in":["2.14-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-28.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"javassist","fixed_in":["3.18.1-8.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"javassist-javadoc","fixed_in":["3.18.1-8.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pki-servlet-engine","fixed_in":["1:9.0.62-1.module_el8.10.0+3791+e0637953"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"relaxngDatatype","fixed_in":["2011.1-7.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"slf4j","fixed_in":["1.7.25-4.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"slf4j-jdk14","fixed_in":["1.7.25-4.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"stax-ex","fixed_in":["1.7.7-8.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"velocity","fixed_in":["1.7-24.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xalan-j2","fixed_in":["2.7.1-38.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xerces-j2","fixed_in":["2.11.0-34.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xml-commons-apis","fixed_in":["1.4.01-25.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xml-commons-resolver","fixed_in":["1.2-26.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xmlstreambuffer","fixed_in":["1.5.4-8.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"xsom","fixed_in":["0-19.20110809svn.module_el8.5.0+2577+9e95fe00"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"pki-jackson-databind","fixed_in":["2.14.1-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"jackson-databind","fixed_in":["2.13.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"jackson-databind","fixed_in":["2.13.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"jackson-databind","fixed_in":["2.13.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"jackson-databind","fixed_in":["2.8.6-1+deb9u10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"jackson-databind","fixed_in":["0:2.14.1-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pki-jackson-databind","fixed_in":["0:2.14.1-2.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-collections","fixed_in":["0:3.2.2-10.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-lang","fixed_in":["0:2.6-21.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-net","fixed_in":["0:3.6-3.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax","fixed_in":["0:1.2.0-16.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax-api","fixed_in":["0:1.2.0-16.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fasterxml-oss-parent","fixed_in":["0:49-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-fastinfoset","fixed_in":["0:1.2.13-9.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb","fixed_in":["0:2.2.11-12.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-api","fixed_in":["0:2.2.12-8.module+el8.10.0+21035+a01f6469"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-core","fixed_in":["0:2.2.11-12.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-runtime","fixed_in":["0:2.2.11-12.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-txw2","fixed_in":["0:2.2.11-12.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-annotations","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-bom","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-core","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-databind","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-json-provider","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-providers","fixed_in":["0:2.14.2-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-module-jaxb-annotations","fixed_in":["0:2.14.2-2.module+el8.10.0+21055+7d27fa3b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-modules-base","fixed_in":["0:2.14.2-2.module+el8.10.0+21055+7d27fa3b"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-parent","fixed_in":["0:2.14-1.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-28.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist","fixed_in":["0:3.18.1-8.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist-javadoc","fixed_in":["0:3.18.1-8.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-engine","fixed_in":["1:9.0.62-1.module+el8.10.0+21257+2b5308b5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"relaxngDatatype","fixed_in":["0:2011.1-7.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j","fixed_in":["0:1.7.25-4.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j-jdk14","fixed_in":["0:1.7.25-4.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"stax-ex","fixed_in":["0:1.7.7-8.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"velocity","fixed_in":["0:1.7-24.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xalan-j2","fixed_in":["0:2.7.1-38.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xerces-j2","fixed_in":["0:2.11.0-34.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-apis","fixed_in":["0:1.4.01-25.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-resolver","fixed_in":["0:1.2-26.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xmlstreambuffer","fixed_in":["0:1.5.4-8.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xsom","fixed_in":["0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"apache-commons-collections","fixed_in":["0:3.2.2-10.module+el8.10.0+1763+c7c02164","0:3.2.2-10.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"apache-commons-lang","fixed_in":["0:2.6-21.module+el8.10.0+1763+c7c02164","0:2.6-21.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"apache-commons-net","fixed_in":["0:3.6-3.module+el8.10.0+1763+c7c02164","0:3.6-3.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"bea-stax","fixed_in":["0:1.2.0-16.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"glassfish-fastinfoset","fixed_in":["0:1.2.13-9.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"glassfish-jaxb","fixed_in":["0:2.2.11-12.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"glassfish-jaxb-api","fixed_in":["0:2.2.12-8.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jackson-annotations","fixed_in":["0:2.14.2-1.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jackson-core","fixed_in":["0:2.14.2-1.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jackson-databind","fixed_in":["0:2.14.2-1.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jackson-jaxrs-providers","fixed_in":["0:2.14.2-1.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-28.module+el8.10.0+1763+c7c02164","1:3.1-28.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"javassist","fixed_in":["0:3.18.1-8.module+el8.10.0+1763+c7c02164","0:3.18.1-8.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"jss","fixed_in":["0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"ldapjdk","fixed_in":["0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pki-core","fixed_in":["0:10.15.0-1.module+el8.10.0+1816+f1a7c8eb"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pki-servlet-engine","fixed_in":["1:9.0.62-1.module+el8.10.0+1767+f923f786"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"relaxngDatatype","fixed_in":["0:2011.1-7.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"resteasy","fixed_in":["0:3.0.26-7.module+el8.10.0+1767+f923f786"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"slf4j","fixed_in":["0:1.7.25-4.module+el8.10.0+1763+c7c02164","0:1.7.25-4.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"stax-ex","fixed_in":["0:1.7.7-8.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"tomcatjss","fixed_in":["0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"velocity","fixed_in":["0:1.7-24.module+el8.10.0+1763+c7c02164","0:1.7-24.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xalan-j2","fixed_in":["0:2.7.1-38.module+el8.10.0+1763+c7c02164","0:2.7.1-38.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xerces-j2","fixed_in":["0:2.11.0-34.module+el8.10.0+1763+c7c02164","0:2.11.0-34.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xml-commons-apis","fixed_in":["0:1.4.01-25.module+el8.10.0+1763+c7c02164","0:1.4.01-25.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","fixed_in":["0:1.2-26.module+el8.10.0+1763+c7c02164","0:1.2-26.module+el8.3.0+74+855e3f5d"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xmlstreambuffer","fixed_in":["0:1.5.4-8.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"xsom","fixed_in":["0:0-19.20110809svn.module+el8.10.0+1763+c7c02164"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.9.2-aikido.3","2.10.1-aikido.1","2.12.5-aikido.1","2.12.3-aikido.2","2.12.4-aikido.1","2.10.1-aikido.2","2.10.1-aikido.3","2.12.4-aikido.2","2.12.5-aikido.2","2.12.3-aikido.3","2.10.1-aikido.4","2.12.5-aikido.3","2.12.3-aikido.4","2.12.4-aikido.3","2.12.3-aikido.5","2.12.4-aikido.4","2.10.1-aikido.5","2.12.5-aikido.4","2.3.1-aikido.5","2.3.1-aikido.6","2.13.0-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","fixed_in":["2.5.2-root.io.1","2.5.2-root.io.2","2.9.2-root.io.2","2.9.2-root.io.3","2.10.1-root.io.1","2.12.5-root.io.1","2.12.3-root.io.2","2.12.4-root.io.1","2.10.1-root.io.2","2.10.1-root.io.3","2.12.4-root.io.2","2.12.5-root.io.2","2.12.3-root.io.3","2.10.1-root.io.4","2.12.5-root.io.3","2.12.3-root.io.4","2.12.4-root.io.3","2.12.3-root.io.5","2.12.4-root.io.4","2.10.1-root.io.5","2.12.5-root.io.4","2.3.1-root.io.5","2.3.1-root.io.6","2.13.0-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"last_affected":"2.13.2.0"},{"fixed":"2.13.2.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.12.6.0"},{"fixed":"2.12.6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pki-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-2.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-10.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-21.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"apache-commons-net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-3.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-16.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"fasterxml-oss-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"49-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-9.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.12-8.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-12.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-12.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.11-12.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-2.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.2-2.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jackson-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-8.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pki-servlet-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.62-1.module_el8.10.0+3791+e0637953"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2011.1-7.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.25-4.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-8.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7-24.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1-38.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.0-34.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.01-25.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-26.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-8.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0-19.20110809svn.module_el8.5.0+2577+9e95fe00"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pki-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"pki-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.14.1-2.el9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.1"},{"fixed":"2.12.1-tuxcare.1"}]}],"versions":["2.12.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.2"},{"fixed":"2.12.2-tuxcare.1"}]}],"versions":["2.12.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.6"},{"fixed":"2.12.6-tuxcare.1"}]}],"versions":["2.12.6"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.5"},{"fixed":"2.12.5-tuxcare.1"}]}],"versions":["2.12.5"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.12.4"},{"fixed":"2.12.4-tuxcare.1"}]}],"versions":["2.12.4"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.0-tuxcare.1"}]}],"versions":["2.13.0"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.1"},{"fixed":"2.13.1-tuxcare.1"}]}],"versions":["2.13.1"],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.6-1+deb9u10"}]}],"versions":["2.8.6-1","2.8.6-1+deb9u1","2.8.6-1+deb9u2","2.8.6-1+deb9u3","2.8.6-1+deb9u4","2.8.6-1+deb9u5","2.8.6-1+deb9u6","2.8.6-1+deb9u7","2.8.6-1+deb9u8","2.8.6-1+deb9u9"]},{"source":"osv","ecosystem":"Debian:10","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-3+deb10u4"}]}],"versions":["2.9.8-3","2.9.8-3+deb10u1","2.9.8-3+deb10u2","2.9.8-3+deb10u3"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.1-1+deb11u1"}]}],"versions":["2.12.1-1"],"bundled":3},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.13.0"},{"fixed":"2.13.2.1"}]}],"versions":["2.13.0","2.13.1","2.13.2"]},{"source":"osv","ecosystem":"Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.6.1"}]}],"versions":["2.0.0","2.0.0-RC1","2.0.0-RC2","2.0.0-RC3","2.0.1","2.0.2","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.10.0","2.10.0.pr1","2.10.0.pr2","2.10.0.pr3","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.10.5.1","2.11.0","2.11.0.rc1","2.11.1","2.11.2","2.11.3","2.11.4","2.12.0","2.12.0-rc1","2.12.0-rc2","2.12.1","2.12.2","2.12.3","2.12.4","2.12.5","2.12.6","2.2.0","2.2.0-rc1","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-rc1","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.0-rc1","2.4.0-rc2","2.4.0-rc3","2.4.1","2.4.1.1","2.4.1.2","2.4.1.3","2.4.2","2.4.3","2.4.4","2.4.5","2.4.5.1","2.4.6","2.4.6.1","2.5.0","2.5.0-rc1","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.6.0","2.6.0-rc1","2.6.0-rc2","2.6.0-rc3","2.6.0-rc4","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.7.1","2.6.7.2","2.6.7.3","2.6.7.4","2.6.7.5","2.7.0","2.7.0-rc1","2.7.0-rc2","2.7.0-rc3","2.7.1","2.7.1-1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.7.9.1","2.7.9.2","2.7.9.3","2.7.9.4","2.7.9.5","2.7.9.6","2.7.9.7","2.8.0","2.8.0.rc1","2.8.0.rc2","2.8.1","2.8.10","2.8.11","2.8.11.1","2.8.11.2","2.8.11.3","2.8.11.4","2.8.11.5","2.8.11.6","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.8.1","2.8.9","2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.10","2.9.10.1","2.9.10.2","2.9.10.3","2.9.10.4","2.9.10.5","2.9.10.6","2.9.10.7","2.9.10.8","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","2.9.9.1","2.9.9.2","2.9.9.3"]},{"source":"osv","ecosystem":"Mageia:9","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.4-2.1.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe2203sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe2203sp2"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.8-10.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.3.rhlw-00004"}]}],"versions":["2.0.0","2.0.0-RC1","2.0.0-RC2","2.0.0-RC3","2.0.1","2.0.2","2.0.4","2.0.5","2.0.6","2.1.0","2.1.1","2.1.2","2.1.3","2.1.4","2.1.5","2.10.0","2.10.0.pr1","2.10.0.pr2","2.10.0.pr3","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.10.5.1","2.11.0","2.11.0.rc1","2.11.1","2.11.2","2.11.3","2.2.0","2.2.0-rc1","2.2.1","2.2.2","2.2.3","2.2.4","2.3.0","2.3.0-rc1","2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.4.0","2.4.0-rc1","2.4.0-rc2","2.4.0-rc3","2.4.1","2.4.1.1","2.4.1.2","2.4.1.3","2.4.2","2.4.3","2.4.4","2.4.5","2.4.5.1","2.4.6","2.4.6.1","2.5.0","2.5.0-rc1","2.5.1","2.5.2","2.5.3","2.5.4","2.5.5","2.6.0","2.6.0-rc1","2.6.0-rc2","2.6.0-rc3","2.6.0-rc4","2.6.1","2.6.2","2.6.3","2.6.4","2.6.5","2.6.6","2.6.7","2.6.7.1","2.6.7.2","2.6.7.3","2.6.7.4","2.6.7.5","2.7.0","2.7.0-rc1","2.7.0-rc2","2.7.0-rc3","2.7.1","2.7.1-1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.7.9","2.7.9.1","2.7.9.2","2.7.9.3","2.7.9.4","2.7.9.5","2.7.9.6","2.7.9.7","2.8.0","2.8.0.rc1","2.8.0.rc2","2.8.1","2.8.10","2.8.11","2.8.11.1","2.8.11.2","2.8.11.3","2.8.11.4","2.8.11.5","2.8.11.6","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.8.1","2.8.9","2.9.0","2.9.0.pr1","2.9.0.pr2","2.9.0.pr3","2.9.0.pr4","2.9.1","2.9.10","2.9.10.1","2.9.10.2","2.9.10.3","2.9.10.4","2.9.10.5","2.9.10.6","2.9.10.7","2.9.10.8","2.9.2","2.9.3","2.9.4","2.9.5","2.9.6","2.9.7","2.9.8","2.9.9","2.9.9.1","2.9.9.2","2.9.9.3"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.6.1-1.redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00004.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.7-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-2.SP4_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.SP04_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.6.1-1.redhat_00003.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00004.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-2.SP4_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.SP04_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.8-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.8-1.redhat_00001.1.el7sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.8-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.5::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:15.0.8-1.redhat_00001.1.el8sso"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el7sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el7sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el8sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el8sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-5.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-javapackages-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-7.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-javapackages-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-7.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.3-1.redhat_00001.1.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-python3-javapackages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.0-7.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1-5.el9sso"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.1-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"pki-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.1-2.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"apache-commons-net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bea-stax-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"fasterxml-oss-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:49-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.10.0+21035+a01f6469"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"glassfish-jaxb-txw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-2.module+el8.10.0+21055+7d27fa3b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-2.module+el8.10.0+21055+7d27fa3b"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jackson-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14-1.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"javassist-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pki-servlet-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.62-1.module+el8.10.0+21257+2b5308b5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slf4j-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.10.0+20993+d0f024b0"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-glassfish-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-4.b08_redhat_00005.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-glassfish-el-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-4.b08_redhat_00005.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.17-3.Final_redhat_00004.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.12-1.Final_redhat_00002.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-2.Final_redhat_00003.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-2.Final_redhat_00003.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-16.SP14_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.11-4.GA_redhat_00002.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.14-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.21-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.21-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.21-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.21-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.21-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.11-4.GA_redhat_00002.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.13-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.12-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-openssl-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.12-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-openssl-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.12-6.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-openssl-linux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.12-6.Final_redhat_00001.1.ep7.el7"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-datatype-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-datatype-jsr310","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-json-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-3.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-module-jaxb-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-modules-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-5.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jackson-modules-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.4-2.redhat_00006.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-16.Final_redhat_00017.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-5.Final_redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.63-5.Final_redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.41-4.SP5_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.17-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.14-3.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.2-10.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-21.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"apache-commons-net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6-3.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bea-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-16.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-fastinfoset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-9.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.11-12.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glassfish-jaxb-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-8.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jackson-jaxrs-providers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.2-1.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-28.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.1-8.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"jss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.11.0-1.module+el8.10.0+1816+f1a7c8eb"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ldapjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.24.0-1.module+el8.10.0+1816+f1a7c8eb"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pki-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.15.0-1.module+el8.10.0+1816+f1a7c8eb"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pki-servlet-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.0.62-1.module+el8.10.0+1767+f923f786"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"relaxngDatatype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2011.1-7.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-7.module+el8.10.0+1767+f923f786"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"slf4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.25-4.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"stax-ex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.7-8.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"tomcatjss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.8.0-1.module+el8.10.0+1816+f1a7c8eb"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"velocity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7-24.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-34.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.01-25.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xml-commons-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-26.module+el8.3.0+74+855e3f5d"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xmlstreambuffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.4-8.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"xsom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0-19.20110809svn.module+el8.10.0+1763+c7c02164"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.2-aikido.3"},{"fixed":"2.10.1-aikido.1"},{"fixed":"2.12.5-aikido.1"},{"fixed":"2.12.3-aikido.2"},{"fixed":"2.12.4-aikido.1"},{"fixed":"2.10.1-aikido.2"},{"fixed":"2.10.1-aikido.3"},{"fixed":"2.12.4-aikido.2"},{"fixed":"2.12.5-aikido.2"},{"fixed":"2.12.3-aikido.3"},{"fixed":"2.10.1-aikido.4"},{"fixed":"2.12.5-aikido.3"},{"fixed":"2.12.3-aikido.4"},{"fixed":"2.12.4-aikido.3"},{"fixed":"2.12.3-aikido.5"},{"fixed":"2.12.4-aikido.4"},{"fixed":"2.10.1-aikido.5"},{"fixed":"2.12.5-aikido.4"},{"fixed":"2.3.1-aikido.5"},{"fixed":"2.3.1-aikido.6"},{"fixed":"2.13.0-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.com.fasterxml.jackson.core:jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-root.io.1"},{"fixed":"2.5.2-root.io.2"},{"fixed":"2.9.2-root.io.2"},{"fixed":"2.9.2-root.io.3"},{"fixed":"2.10.1-root.io.1"},{"fixed":"2.12.5-root.io.1"},{"fixed":"2.12.3-root.io.2"},{"fixed":"2.12.4-root.io.1"},{"fixed":"2.10.1-root.io.2"},{"fixed":"2.10.1-root.io.3"},{"fixed":"2.12.4-root.io.2"},{"fixed":"2.12.5-root.io.2"},{"fixed":"2.12.3-root.io.3"},{"fixed":"2.10.1-root.io.4"},{"fixed":"2.12.5-root.io.3"},{"fixed":"2.12.3-root.io.4"},{"fixed":"2.12.4-root.io.3"},{"fixed":"2.12.3-root.io.5"},{"fixed":"2.12.4-root.io.4"},{"fixed":"2.10.1-root.io.5"},{"fixed":"2.12.5-root.io.4"},{"fixed":"2.3.1-root.io.5"},{"fixed":"2.3.1-root.io.6"},{"fixed":"2.13.0-root.io.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jackson-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jackson-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jackson-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jackson-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.9.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"jackson-dataformats-binary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13.0-150200.3.3.3"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.2-1","2.2.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.2-2","2.4.2-3","2.4.2-3ubuntu0.1~esm1","2.4.2-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.6-1","2.9.1-1","2.9.4-1","2.9.5-1","2.9.8-1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.9.9.3-1","2.10.0-2","2.10.1-1","2.10.2-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.1-1","2.12.5-1","2.13.0-1","2.13.0-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.0-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.0+ds-1build1","2.14.0+ds-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14.0+ds-1","2.14.0+ds-1build1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fasterxml","product":"jackson-databind"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_insights_acquisition_unit"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"netapp","product":"snap_creator_framework"},{"vendor":"oracle","product":"big_data_spatial_and_graph"},{"vendor":"oracle","product":"coherence"},{"vendor":"oracle","product":"commerce_platform"},{"vendor":"oracle","product":"communications_billing_and_revenue_management"},{"vendor":"oracle","product":"communications_cloud_native_core_binding_support_function"},{"vendor":"oracle","product":"communications_cloud_native_core_console"},{"vendor":"oracle","product":"communications_cloud_native_core_network_repository_function"},{"vendor":"oracle","product":"communications_cloud_native_core_network_slice_selection_function"},{"vendor":"oracle","product":"communications_cloud_native_core_security_edge_protection_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_service_communication_proxy"},{"vendor":"oracle","product":"communications_cloud_native_core_unified_data_repository"},{"vendor":"oracle","product":"financial_services_analytical_applications_infrastructure"},{"vendor":"oracle","product":"financial_services_behavior_detection_platform"},{"vendor":"oracle","product":"financial_services_crime_and_compliance_management_studio"},{"vendor":"oracle","product":"financial_services_enterprise_case_management"},{"vendor":"oracle","product":"financial_services_trade-based_anti_money_laundering"},{"vendor":"oracle","product":"global_lifecycle_management_nextgen_oui_framework"},{"vendor":"oracle","product":"global_lifecycle_management_opatch"},{"vendor":"oracle","product":"graph_server_and_client"},{"vendor":"oracle","product":"health_sciences_empirica_signal"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"primavera_gateway"},{"vendor":"oracle","product":"primavera_p6_enterprise_project_portfolio_management"},{"vendor":"oracle","product":"primavera_unifier"},{"vendor":"oracle","product":"retail_sales_audit"},{"vendor":"oracle","product":"sd-wan_edge"},{"vendor":"oracle","product":"spatial_studio"},{"vendor":"oracle","product":"utilities_framework"},{"vendor":"oracle","product":"weblogic_server"}],"references":[{"url":"https://github.com/FasterXML/jackson-databind/issues/2816","tags":["x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220506-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5283","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36518","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b","tags":["web"]},{"url":"https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12","tags":["web"]},{"url":"https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd","tags":["web"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20220506-0004","tags":["web"]},{"url":"https://github.com/advisories/GHSA-57j2-w4cx-62h2","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2312","tags":["advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36518","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064698","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2312.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3061","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3061.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1760018305.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1764858279.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-36518","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2024-0069.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30368","tags":["report"]},{"url":"https://www.debian.org/lts/security/2022/dla-2990","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-May/011022.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WTX6HAJ7KVGVZQ6APMA35RM7R7BKVSMB/","tags":["web"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-November/012934.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3IQ2OJSME4FMTGEF2CROURE4WDT3DEVB/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3207","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1971","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/42xxx/CVE-2022-42004.json","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/3582","tags":["report"]},{"url":"https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88","tags":["fix"]},{"url":"https://github.com/advisories/GHSA-rgv9-q543-rqg4","tags":["advisory"]},{"url":"https://github.com/FasterXML/jackson-databind/issues/3328","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46877","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3x8x-79m2-3w2w","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4918","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073890","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23120","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23171","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23194","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23241","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23299","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23300","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23312","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23313","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23336","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23338","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23339","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23351","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23353","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23429","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23432","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23531","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23532","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4918.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36518","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37136","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42392","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42392","tags":["advisory"]},{"url":"https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43797","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0084","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0853","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21299","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23221","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-45hx-wfhj-473x","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4919","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23121","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4919.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6782","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2101942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6782.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0225","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2256","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2256","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-w9mf-83w3-fv49","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2668","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2668","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-wf7g-7h6h-678v","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6783","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6783.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7409","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7409.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2027195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42575","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42575","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7410","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7410.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7411","tags":["advisory"]},{"url":"https://access.redhat.com/articles/11258","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7411.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2312.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-12764","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-12765","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-16724","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-19140","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-22445","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3061.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9582","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262918","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-29413","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9582.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10740","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13949","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13949","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13949","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25638","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25638","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25638","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27782","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27782","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28170","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28170","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28170","tags":["advisory"]},{"url":"https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1259","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4492","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4492","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5379","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5379","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1233","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1233","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1233","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v4mm-q8fv-r2w5","tags":["advisory"]},{"url":"https://github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523","tags":["article"]},{"url":"https://issues.redhat.com/browse/WFLY-19226","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9583","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2023-003","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264928","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-29448","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9583.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1108","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m4mm-pg93-fv78","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-1973","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-1973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1973","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3223","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-1635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1635","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3061","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221678-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1177616","tags":["report"]},{"url":"https://bugzilla.suse.com/1182481","tags":["report"]},{"url":"https://bugzilla.suse.com/1197132","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36518","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-36518","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-36518","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T00:00:00Z","modified":"2025-08-27T20:34:32.19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2022-1319","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T00:00:00Z","modified":"2025-08-27T20:34:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:51.141859Z"}],"ghsa":[{"id":"GHSA-57j2-w4cx-62h2","title":"Deeply nested json in jackson-databind","description":"jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-12T00:00:36Z","modified":"2024-03-15T00:24:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:37:40.81935Z"}],"nvd":[{"id":"CVE-2020-36518","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T07:15:07.8Z","modified":"2026-06-17T03:15:38.263Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:46.951463Z"}],"osv":[{"id":"CVE-2020-36518","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T07:15:07.8Z","modified":"2026-10-20T10:54:21.180547736Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"DEBIAN-CVE-2020-36518","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T07:15:07.8Z","modified":"2026-10-26T12:02:02.932311181Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"GHSA-57j2-w4cx-62h2","title":"Deeply nested json in jackson-databind","description":"jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-12T00:00:36Z","modified":"2026-09-10T03:49:13.05002832Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:37.864461Z"},{"id":"OESA-2023-1921","title":"jackson-databind security update","description":"The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.\r\n\r\nSecurity Fix(es):\r\n\r\njackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518)\r\n\r\nIn FasterXML jackson-databind before 2.14.0-rc1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. Additional fix version in 2.13.4.1 and 2.12.17.1(CVE-2022-42003)\r\n\r\nIn FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)","status":"published","published":"2023-12-15T11:06:22Z","modified":"2026-08-18T01:18:05.41357779Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2023-1971","title":"jackson-databind security update","description":"The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration.\r\n\r\nSecurity Fix(es):\r\n\r\njackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.(CVE-2020-36518)\r\n\r\nIn FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.(CVE-2022-42003)\r\n\r\nIn FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.(CVE-2022-42004)","status":"published","published":"2023-12-22T11:06:25Z","modified":"2026-08-18T01:18:06.981345295Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHLW-2026-dd1828f1f23f1ae5","title":"Lightwell Security Advisory: jackson-databind 2.11.3.rhlw-00004","description":"Red Hat Lightwell has released com.fasterxml.jackson.core:jackson-databind 2.11.3.rhlw-00004 with backported fixes for CVE-2020-36518, CVE-2022-42004, and CVE-2021-46877.\n\nCVE-2020-36518: jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.\n\nCVE-2022-42004: In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization.\n\nCVE-2021-46877: jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.\n\nThis patched artifact is a drop-in replacement for com.fasterxml.jackson.core:jackson-databind 2.11.3 from Maven Central.","status":"published","published":"2026-09-09T14:23:17Z","modified":"2026-10-27T04:13:02.180025891Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:59.135214Z"},{"id":"RHSA-2022:4918","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7","status":"published","published":"2024-09-29T19:10:02Z","modified":"2026-10-13T10:03:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4919","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8","status":"published","published":"2024-09-29T19:09:55Z","modified":"2026-10-13T10:03:06Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6782","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.5.3 security update on RHEL 7","status":"published","published":"2024-09-29T19:06:57Z","modified":"2026-10-13T10:03:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:6783","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.5.3 security update on RHEL 8","status":"published","published":"2024-09-29T19:07:05Z","modified":"2026-10-13T10:03:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7409","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 7","status":"published","published":"2024-09-29T19:07:31Z","modified":"2026-10-13T10:03:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7410","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 8","status":"published","published":"2024-09-29T19:07:15Z","modified":"2026-10-13T10:03:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7411","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 9","status":"published","published":"2024-09-29T19:07:39Z","modified":"2026-10-13T10:03:28Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:2312","title":"Red Hat Security Advisory: jackson security update","status":"published","published":"2024-09-13T15:46:43Z","modified":"2026-10-13T10:04:08Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2024:3061","title":"Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security update","status":"published","published":"2024-09-13T15:48:09Z","modified":"2026-10-13T10:06:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2025:9582","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.11 on RHEL 7 security update","status":"published","published":"2025-06-25T10:06:35Z","modified":"2026-10-14T10:11:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:9583","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.14 Security update","status":"published","published":"2025-06-25T10:06:36Z","modified":"2026-10-14T10:11:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"UBUNTU-CVE-2020-36518","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","status":"published","published":"2022-03-11T07:15:00Z","modified":"2026-10-17T12:56:14.908280553Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"ALSA-2023:2312","title":"Moderate: jackson security update","description":"Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats.\n\nSecurity Fix(es):\n\n* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:52.692033214Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2024:3061","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by AlmaLinux Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.772756667Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1760018305","title":"jackson-databind: Fix of CVE-2020-36518","description":"- CVE-2020-36518: fix denial of service via a large depth of nested objects","status":"published","published":"2026-04-17T13:08:46Z","modified":"2026-06-01T00:31:01.237326834Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1764858279","title":"jackson-databind: Fix of 2 CVEs","description":"- Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected\n- Rebuilt with the CVE-2025-52999: fixed jackson-core version","status":"published","published":"2025-12-04T14:24:42Z","modified":"2026-06-01T00:31:22.148304972Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1776386160","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (4 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 4 CVEs. Fixed in 2.12.1-tuxcare.1.","status":"published","published":"2026-08-04T14:52:26Z","modified":"2026-10-15T09:46:27.893310338Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1791782090","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.2-tuxcare.1.","status":"published","published":"2026-10-12T05:14:50Z","modified":"2026-10-15T09:47:45.318534043Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792441757","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.6-tuxcare.1.","status":"published","published":"2026-10-19T20:29:17Z","modified":"2026-10-20T01:45:04.437604806Z","updated_at":"2026-11-02T15:43:54.378946Z"},{"id":"CLSA-2026-1792514818","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.5-tuxcare.1.","status":"published","published":"2026-10-20T16:46:57Z","modified":"2026-10-20T19:30:06.68014496Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792514845","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.12.4-tuxcare.1.","status":"published","published":"2026-10-20T16:47:25Z","modified":"2026-10-20T19:30:03.973351656Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792517970","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (8 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 8 CVEs. Fixed in 2.13.0-tuxcare.1.","status":"published","published":"2026-10-20T17:39:30Z","modified":"2026-10-20T19:30:06.686896323Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792517981","title":"TuxCare security update for com.fasterxml.jackson.core:jackson-databind (7 CVEs)","description":"TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 7 CVEs. Fixed in 2.13.1-tuxcare.1.","status":"published","published":"2026-10-20T17:39:41Z","modified":"2026-10-20T19:30:06.47741775Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"DLA-2990-1","title":"jackson-databind - security update","status":"published","published":"2022-05-02T00:00:00Z","modified":"2026-03-09T01:18:23.166797Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3207-1","title":"jackson-databind - security update","status":"published","published":"2022-11-27T00:00:00Z","modified":"2026-03-09T01:20:49.317508Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5283-1","title":"jackson-databind - security update","status":"published","published":"2022-11-17T00:00:00Z","modified":"2026-03-09T02:10:25.791276Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2024-0069","title":"Updated jackson-databind packages fix security vulnerabilities","description":"jackson-databind before 2.13.0 allows a Java StackOverflow exception and\ndenial of service via a large depth of nested objects. (CVE-2020-36518)\nIn FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1,\nresource exhaustion can occur because of a lack of a check in primitive\nvalue deserializers to avoid deep wrapper array nesting, when the\nUNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. (CVE-2022-42003)\nIn FasterXML jackson-databind before 2.13.4, resource exhaustion can\noccur because of a lack of a check in\nBeanDeserializer._deserializeFromArray to prevent use of deeply nested\narrays. An application is vulnerable only with certain customized\nchoices for deserialization. (CVE-2022-42004)\n","status":"published","published":"2024-03-16T16:28:17Z","modified":"2026-04-16T04:42:35.853245265Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:12096-1","title":"jackson-databind-2.13.0-2.1 on GA media","description":"These are all security issues fixed in the jackson-databind-2.13.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:58:19.387499Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12100-1","title":"jackson-annotations-2.13.0-3.1 on GA media","description":"These are all security issues fixed in the jackson-annotations-2.13.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:35:51.205284Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12101-1","title":"jackson-core-2.13.0-3.1 on GA media","description":"These are all security issues fixed in the jackson-core-2.13.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:59:36.034773Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"RLSA-2024:3061","title":"Moderate: pki-core:10.6 and pki-deps:10.6 security update","description":"The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.\n\nSecurity Fix(es):\n\n* jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:30.118978Z","modified":"2026-02-04T14:00:11.189872Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ROOT-APP-MAVEN-CVE-2020-36518","title":"CVE-2020-36518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root","description":"Root has patched CVE-2020-36518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-08-31T12:18:40Z","modified":"2026-08-31T13:30:08.039506044Z","updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"SUSE-SU-2022:1678-1","title":"Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core","description":"This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of nested objects in jackson-databind. (bsc#1197132)\n- CVE-2020-25649: Fixed an insecure entity expansion in jackson-databind which was vulnerable to XML external entity (XXE). (bsc#1177616)\n- CVE-2020-28491: Fixed a bug which could cause `java.lang.OutOfMemoryError` exception in jackson-dataformats-binary. (bsc#1182481)\n\nNon security fixes:\n\njackson-annotations - update from version 2.10.2 to version 2.13.0:\n\n   + Build with source/target levels 8\n   + Add 'mvnw' wrapper\n   + 'JsonSubType.Type' should accept array of names\n   + Jackson version alignment with Gradle 6\n   + Add '@JsonIncludeProperties'\n   + Add '@JsonTypeInfo(use=DEDUCTION)'\n   + Ability to use '@JsonAnyGetter' on fields\n   + Add '@JsonKey' annotation\n   + Allow repeated calls to 'SimpleObjectIdResolver.bindItem()' for same mapping\n   + Add 'namespace' property for '@JsonProperty' (for XML module)\n   + Add target 'ElementType.ANNOTATION_TYPE' for '@JsonEnumDefaultValue'\n   + 'JsonPattern.Value.pattern' retained as '', never (accidentally) exposed as 'null'\n   + Rewrite to use `ant` for building in order to be able to use it in packages that have to be built before maven\n\njackson-bom - update from version 2.10.2 to version 2.13.0:\n\n   + Configure moditect plugin with '\u003cjvmVersion\u003e11\u003c/jvmVersion\u003e'\n   + jackson-bom manages the version of 'junit:junit'\n   + Drop 'jackson-datatype-hibernate3' (support for Hibernate 3.x datatypes)\n   + Removed 'jakarta' classifier variants of JAXB/JSON-P/JAX-RS modules due to the addition of new Jakarta artifacts\n     (Jakarta-JSONP, Jakarta-xmlbind-annotations, Jakarta-rs-providers)\n   + Add version for 'jackson-datatype-jakarta-jsonp' module (introduced after 2.12.2)\n   + Add (beta) version for 'jackson-dataformat-toml'\n   + Jakarta 9 artifact versions are missing from jackson-bom\n   + Add default settings for 'gradle-module-metadata-maven-plugin' (gradle metadata)\n   + Add default settings for 'build-helper-maven-plugin'\n   + Drop 'jackson-module-scala_2.10' entry (not released for Jackson 2.12 or later)\n   + Add override for 'version.plugin.bundle' (for 5.1.1) to help build on JDK 15+\n   + Add missing version for jackson-datatype-eclipse-collections\n    \njackson-core - update from version 2.10.2 to version 2.13.0:\n\n   + Build with source and target levels 8\n   + Misleading exception for input source when processing byte buffer with start offset\n   + Escape contents of source document snippet for 'JsonLocation._appendSourceDesc()'\n   + Add 'StreamWriteException' type to eventually replace 'JsonGenerationException'\n   + Replace 'getCurrentLocation()'/'getTokenLocation()' with 'currentLocation()'/'currentTokenLocation()' in \n     'JsonParser'\n   + Replace 'JsonGenerator.writeObject()' (and related) with 'writePOJO()'\n   + Replace 'getCurrentValue()'/'setCurrentValue()' with 'currentValue()'/'assignCurrentValue()' in \n     'JsonParser'/'JsonGenerator\n   + Introduce O(n^1.5) BigDecimal parser implementation\n   + ByteQuadsCanonicalizer.addName(String, int, int) has incorrect handling for case of q2 == null\n   + UTF32Reader ArrayIndexOutOfBoundsException\n   + Improve exception/JsonLocation handling for binary content: don't show content, include byte offset\n   + Fix an issue with the TokenFilter unable to ignore properties when deserializing.\n   + Optimize array allocation by 'JsonStringEncoder'\n   + Add 'mvnw' wrapper\n   + (partial) Optimize array allocation by 'JsonStringEncoder'\n   + Add back accidentally removed 'JsonStringEncoder' related methods in 'BufferRecyclers' \n     (like 'getJsonStringEncoder()')\n   + 'ArrayOutOfBoundException' at 'WriterBasedJsonGenerator.writeString(Reader, int)'\n   + Allow 'optional-padding' for 'Base64Variant'\n   + More customizable TokenFilter inclusion (using 'Tokenfilter.Inclusion')\n   + Publish Gradle Module Metadata\n   + Add 'StreamReadCapability' for further format-based/format-agnostic handling improvements\n   + Add 'JsonParser.isExpectedNumberIntToken()' convenience method\n   + Add 'StreamWriteCapability' for further format-based/format-agnostic handling improvements\n   + Add 'JsonParser.getNumberValueExact()' to allow precision-retaining buffering\n   + Limit initial allocated block size by 'ByteArrayBuilder' to max block size\n   + Add 'JacksonException' as parent class of 'JsonProcessingException'\n   + Make 'JsonWriteContext.reset()' and 'JsonReadContext.reset()' methods public\n   + Deprecate 'JsonParser.getCurrentTokenId()' (use '#currentTokenId()' instead)\n   + Full 'LICENSE' included in jar for easier access by compliancy tools\n   + Fix NPE in 'writeNumber(String)' method of 'UTF8JsonGenerator', 'WriterBasedJsonGenerator'\n   + Add a String Array write method in the Streaming API\n   + Synchronize variants of 'JsonGenerator#writeNumberField' with 'JsonGenerator#writeNumber'\n   + Add JsonGenerator#writeNumber(char[], int, int) method\n   + Do not clear aggregated contents of 'TextBuffer' when 'releaseBuffers()' called\n   + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)'\n   + Optionally allow leading decimal in float tokens\n   + Rewrite to use ant for building in order to be able to use it in packages that have to be built before maven\n   + Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results in endless stream of 'VALUE_NULL' tokens\n   + Handle case when system property access is restricted\n   + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)'\n   + DataFormatMatcher#getMatchedFormatName throws NPE when no match exists\n   + 'JsonParser.getCurrentLocation()' byte/char offset update incorrectly for big payloads \n\njackson-databind - update from version 2.10.5.1 to  version 2.13.0:\n\n   + '@JsonValue' with integer for enum does not deserialize correctly\n   + 'AnnotatedMethod.getValue()/setValue()' doesn't have useful exception message\n   + Add 'DatabindException' as intermediate subtype of 'JsonMappingException'\n   + Jackson does not support deserializing new Java 9 unmodifiable collections\n   + Allocate TokenBuffer instance via context objects (to\n      allow format-specific buffer types)\n   + Add mechanism for setting default 'ContextAttributes' for 'ObjectMapper'\n   + Add 'DeserializationContext.readTreeAsValue()' methods\n      for more convenient conversions for deserializers to use\n   + Clean up support of typed 'unmodifiable', 'singleton'\n      Maps/Sets/Collections\n   + Extend internal bitfield of 'MapperFeature' to be\n      'long'\n   + Add 'removeMixIn()' method in 'MapperBuilder'\n   + Backport 'MapperBuilder' lambda-taking methods:\n      'withConfigOverride()', 'withCoercionConfig()',\n      'withCoercionConfigDefaults()'\n   + configOverrides(boolean.class) silently ignored,\n      whereas .configOverride(Boolean.class) works for both\n      primitives and boxed boolean values\n   + Dont track unknown props in buffer if\n      'ignoreAllUnknown' is true\n   + Should allow deserialization of java.time types via\n      opaque 'JsonToken.VALUE_EMBEDDED_OBJECT'\n   + Optimize 'AnnotatedConstructor.call()' case by passing\n      explicit null\n   + Add AnnotationIntrospector.XmlExtensions interface for\n      decoupling javax dependencies\n   + Custom SimpleModule not included in list returned by\n      ObjectMapper.getRegisteredModuleIds() after registration\n   + Use more limiting default visibility settings for JDK\n      types (java.*, javax.*)\n   + Deep merge for 'JsonNode' using 'ObjectReader.readTree()'\n   + IllegalArgumentException: Conflicting setter\n      definitions for property with more than 2 setters\n   + Serializing java.lang.Thread fails on JDK 11 and above\n   + String-based 'Map' key deserializer is not\n      deterministic when there is no single arg constructor\n   + Add ArrayNode#set(int index, primitive_type value)\n   + JsonStreamContext 'currentValue' wrongly references to\n      '@JsonTypeInfo' annotated object\n   + DOM 'Node' serialization omits the default namespace\n      declaration\n   + Support 'suppressed' property when deserializing 'Throwable'\n   + 'AnnotatedMember.equals()' does not work reliably\n   + Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for Scala module\n   + For an absent property Jackson injects 'NullNode'\n      instead of 'null' to a JsonNode-typed constructor argument of\n      a '@ConstructorProperties'-annotated constructor\n   + 'XMLGregorianCalendar' doesn't work with default typing\n   + Content 'null' handling not working for root values\n   + StdDeserializer rejects blank (all-whitespace) strings\n      for ints\n   + 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with\n      'DefaultTypeResolverBuilder'\n   + Add PropertyNamingStrategies.UpperSnakeCaseStrategy\n      (and UPPER_SNAKE_CASE constant)\n   + StackOverflowError when serializing JsonProcessingException\n   + Support for BCP 47 'java.util.Locale' serialization/deserialization\n   + String property deserializes null as 'null' for\n      JsonTypeInfo.As.EXISTING_PROPERTY\n   + Can not deserialize json to enum value with\n      Object-/Array-valued input, '@JsonCreator'\n   + Fix to avoid problem with 'BigDecimalNode', scale of\n      'Integer.MIN_VALUE'\n   + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover\n      coercion from (Empty) String via 'AsNull'\n   + Add 'mvnw' wrapper\n   + (regression) Factory method generic type resolution\n      does not use Class-bound type parameter\n   + Deserialization of 'empty' subtype with DEDUCTION failed\n   + Merge findInjectableValues() results in\n      AnnotationIntrospectorPair\n   + READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't\n      work with empty strings\n   + 'TypeFactory' cannot convert 'Collection' sub-type\n      without type parameters to canonical form and back\n    + Fix for [modules-java8#207]: prevent fail on secondary Java 8\n      date/time types\n   + EXTERNAL_PROPERTY does not work well with '@JsonCreator'\n      and 'FAIL_ON_UNKNOWN_PROPERTIES'\n   + String property deserializes null as 'null' for\n     'JsonTypeInfo.As.EXTERNAL_PROPERTY'\n   + Property ignorals cause 'BeanDeserializer 'to forget\n      how to read from arrays (not copying\n      '_arrayDelegateDeserializer')\n   + UntypedObjectDeserializer' mixes multiple unwrapped\n      collections (related to #2733)\n   + Two cases of incorrect error reporting about\n      DeserializationFeature\n   + Bug in polymorphic deserialization with '@JsonCreator',\n      '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY'\n   + Polymorphic subtype deduction ignores 'defaultImpl'\n      attribute\n   + MismatchedInputException: Cannot deserialize instance\n      of 'com.fasterxml.jackson.databind.node.ObjectNode' out of\n      VALUE_NULL token\n   + Missing override for 'hasAsKey()' in\n      'AnnotationIntrospectorPair'\n   + Creator lookup fails with 'InvalidDefinitionException'\n      for conflict between single-double/single-Double arg constructor\n   + 'MapDeserializer' forcing 'JsonMappingException'\n      wrapping even if WRAP_EXCEPTIONS set to false\n   + Auto-detection of constructor-based creator method\n      skipped if there is an annotated factory-based creator method\n      (regression from 2.11)\n   + 'ObjectMapper.treeToValue()' no longer invokes\n      'JsonDeserializer.getNullValue()'\n   + DeserializationProblemHandler is not invoked when\n      trying to deserialize String\n   + Fix failing 'double' JsonCreators in jackson 2.12.0\n   + Conflicting in POJOPropertiesCollector when having\n      namingStrategy\n   + Breaking API change in 'BasicClassIntrospector' (2.12.0)\n   + 'JsonNode.requiredAt()' does NOT fail on some path expressions\n   + Exception thrown when 'Collections.synchronizedList()'\n      is serialized with type info, deserialized\n   + Add option to resolve type from multiple existing\n      properties, '@JsonTypeInfo(use=DEDUCTION)'\n   + '@JsonIgnoreProperties' does not prevent Exception\n      Conflicting getter/setter definitions for property\n   + Deserialization Not Working Right with Generic Types and\n      Builders\n   + Add '@JsonIncludeProperties(propertyNames)' (reverse of\n      '@JsonIgnoreProperties')\n   + '@JsonAnyGetter' should be allowed on a field\n   + Allow handling of single-arg constructor as property\n      based by default\n   + Allow case insensitive deserialization of String value\n      into 'boolean'/'Boolean' (esp for Excel)\n   + Allow use of '@JsonFormat(with=JsonFormat.Feature\n      .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class\n   + Abstract class included as part of known type ids for\n      error message   when using JsonSubTypes\n   + Distinguish null from empty string for UUID\n      deserialization\n   + 'ReferenceType' does not expose valid containedType\n   + Add 'CoercionConfig[s]' mechanism for configuring\n      allowed coercions\n   + 'JsonProperty.Access.READ_ONLY' does not work with\n      'getter-as-setter' 'Collection's\n   + Support 'BigInteger' and 'BigDecimal' creators in\n      'StdValueInstantiator'\n   + 'JsonProperty.Access.READ_ONLY' fails with collections\n      when a property name is specified\n   + 'BigDecimal' precision not retained for polymorphic\n      deserialization\n   + Support use of 'Void' valued properties\n      ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES')\n   + Explicitly fail (de)serialization of 'java.time.*'\n      types in absence of registered custom (de)serializers\n   + Improve description included in by\n      'DeserializationContext.handleUnexpectedToken()'\n   + Support for JDK 14 record types ('java.lang.Record')\n   + 'PropertyNamingStrategy' class initialization depends\n      on its subclass, this can lead to class loading deadlock\n   + 'FAIL_ON_IGNORED_PROPERTIES' does not throw on\n      'READONLY' properties with an explicit name\n   + Add Gradle Module Metadata for version alignment with\n      Gradle 6\n   + Allow 'JsonNode' auto-convert into 'ArrayNode' if\n      duplicates found (for XML)\n   + Allow values of 'untyped' auto-convert into 'List' if\n      duplicates found (for XML)\n   + Add 'ValueInstantiator.createContextual(...)\n   + Support multiple names in 'JsonSubType.Type'\n   + Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic\n      deserialization of Enums\n   + Explicitly fail (de)serialization of 'org.joda.time.*'\n      types in absence of registered custom (de)serializers\n   + Trailing zeros are stripped when deserializing\n      BigDecimal values inside a @JsonUnwrapped property\n   + Extract getter/setter/field name mangling from\n      'BeanUtil' into pluggable 'AccessorNamingStrategy'\n   + Throw 'InvalidFormatException' instead of\n      'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion\n      failures\n   + Add '@JsonKey' annotation (similar to '@JsonValue') for\n      customizable serialization of Map keys\n   + 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should\n      work for enum as keys\n   + Add support for disabling special handling of 'Creator\n      properties' wrt alphabetic property ordering\n   + Add 'JsonNode.canConvertToExactIntegral()' to indicate\n      whether floating-point/BigDecimal values could be converted to\n      integers losslessly\n   + Improve static factory method generic type resolution\n      logic\n   + Allow preventing 'Enum from integer' coercion using new\n      'CoercionConfig' system\n   + '@JsonValue' not considered when evaluating inclusion\n   + Make some java platform modules optional\n   + Add support for serializing 'java.sql.Blob'\n   + 'AnnotatedCreatorCollector' should avoid processing\n      synthetic static (factory) methods\n   + Add errorprone static analysis profile to detect bugs at build time\n   + Problem with implicit creator name detection for constructor detection\n   + Add 'BeanDeserializerBase.isCaseInsensitive()'\n   + Refactoring of 'CollectionDeserializer' to solve CSV array handling issues\n   + Full 'LICENSE' included in jar for easier access by compliancy tools\n   + Fix type resolution for static methods (regression in 2.11.3)\n   + '@JsonCreator' on constructor not compatible with '@JsonIdentityInfo', \n     'PropertyGenerator'\n   + Add debug improvements about 'ClassUtil.getClassMethods()'\n   + Cannot detect creator arguments of mixins for JDK types\n   + Add 'JsonFormat.Shape' awareness for UUID serialization ('UUIDSerializer')\n   + Json serialization fails or a specific case that\n      contains generics and static methods with generic parameters\n      (2.11.1 -\u003e 2.11.2 regression)\n   + 'ObjectMapper.activateDefaultTypingAsProperty()' is not\n      using parameter 'PolymorphicTypeValidator'\n   + Problem deserialization 'raw generic' fields\n      (like 'Map') in 2.11.2\n   + Fix issues with 'MapLikeType.isTrueMapType()',\n      'CollectionLikeType.isTrueCollectionType()'\n   + Parser/Generator features not set when using\n      'ObjectMapper.createParser()', 'createGenerator()'\n   + Polymorphic subtypes not registering on copied\n      ObjectMapper (2.11.1)\n   + Failure to read AnnotatedField value in Jackson 2.11\n   + 'TypeFactory.constructType()' does not take\n      'TypeBindings' correctly\n   + Builder Deserialization with JsonCreator Value vs Array\n   + JsonCreator on static method in Enum and Enum used as\n      key in map fails randomly\n   + 'StdSubtypeResolver' is not thread safe (possibly due\n      to copy not being made with 'ObjectMapper.copy()')\n   + 'Conflicting setter definitions for property' exception\n      for 'Map' subtype during deserialization\n   + Fail to deserialize local Records\n   + Rearranging of props when property-based generator is\n      in use leads to incorrect output\n   + Jackson doesn't respect\n      'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer\n      properties\n   + 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'\n      don't support 'Map' type field\n   + JsonParser from MismatchedInputException cannot\n      getText() for floating-point value\n   + i-I case conversion problem in Turkish locale with\n      case-insensitive deserialization\n   + '@JsonInject' fails on trying to find deserializer even\n      if inject-only\n   + Polymorphic deserialization should handle\n      case-insensitive Type Id property name if\n      'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled\n   + TreeTraversingParser and UTF8StreamJsonParser create\n      contexts differently\n   + Support use of '@JsonAlias' for enum values\n   + 'declaringClass' of 'enum-as-POJO' not removed for\n      'ObjectMapper' with a naming strategy\n   + Fix 'JavaType.isEnumType()' to support sub-classes\n   + BeanDeserializerBuilder Protected Factory Method for Extension\n   + Support '@JsonSerialize(keyUsing)' and\n      '@JsonDeserialize(keyUsing)' on Key class\n   + Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL'\n   + 'ObjectMapper.registerSubtypes(NamedType...)' doesn't\n      allow registering same POJO for two different type ids\n   + 'DeserializationContext.handleMissingInstantiator()'\n      throws 'MismatchedInputException' for non-static inner classes\n   + Incorrect 'JsonStreamContext' for 'TokenBuffer' and\n      'TreeTraversingParser'\n   + Add 'AnnotationIntrospector.findRenameByField()' to\n      support Kotlin's 'is-getter' naming convention\n   + Use '@JsonProperty(index)' for sorting properties on\n      serialization\n   + Java 8 'Optional' not working with '@JsonUnwrapped' on\n      unwrappable type\n   + Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES'\n      to allow blocking use of unsafe base type for polymorphic\n      deserialization\n   + 'ObjectMapper.setSerializationInclusion()' is ignored\n      for 'JsonAnyGetter'\n   + 'ValueInstantiationException' when deserializing using\n      a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS'\n   + JsonIgnoreProperties(ignoreUnknown = true) does not\n      work on field and method level\n   + Failure to resolve generic type parameters on\n      serialization\n   + JsonParser cannot getText() for input stream on\n      MismatchedInputException\n   + ObjectReader readValue lacks Class\u003cT\u003e argument\n   + Change default textual serialization of\n      'java.util.Date'/'Calendar' to include colon in timezone\n      offset\n   + Add 'ObjectMapper.createParser()' and 'createGenerator()' methods\n   + Allow serialization of 'Properties' with non-String values\n   + Add new factory method for creating custom 'EnumValues'\n      to pass to 'EnumDeserializer\n   + 'IllegalArgumentException' thrown for mismatched\n      subclass deserialization\n   + Add convenience methods for creating 'List', 'Map'\n      valued 'ObjectReader's (ObjectMapper.readerForListOf())\n   + 'SerializerProvider.findContentValueSerializer()' methods\n    \njackson-dataformats-binary - update from version 2.10.1 to version 2.13.0:\n    \n   + (cbor) Should validate UTF-8 multi-byte validity for short decode path too\n   + (ion) Deprecate 'CloseSafeUTF8Writer', remove use\n   + (smile) Make 'SmileFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'\n   + (cbor) Make 'CBORFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'\n   + (cbor) Handle case of BigDecimal with Integer.MIN_VALUE for scale gracefully\n   + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (cbor) Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (smile) Add 'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient\n     handling of broken Unicode surrogate pairs on writing\n   + (avro) Add 'logicalType' support for some 'java.time' types; add 'AvroJavaTimeModule'\n     for native ser/deser\n   + Support base64 strings in 'getBinaryValue()' for CBOR and Smile\n   + (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name\n   + (avro) Generate logicalType switch\n   + (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name\n   + (ion) 'jackson-dataformat-ion' does not handle\n      null.struct deserialization correctly\n   + 'Ion-java' dep 1.4.0 -\u003e 1.8.0\n   + Minor change to Ion module registration names (fully-qualified)\n   + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer)\n   + (cbor) Uncaught exception in CBORParser._findDecodedFromSymbols() (by ossfuzzer)\n   + (smile) Uncaught validation problem wrt Smile 'BigDecimal' type\n   + (smile) ArrayIndexOutOfBoundsException for malformed Smile header\n   + (cbor) Failed to handle case of alleged String with length of Integer.MAX_VALUE\n   + (smile) Allocate byte[] lazily for longer Smile binary data payloads\n   + (cbor) CBORParser need to validate zero-length byte[] for BigInteger\n   + (smile) Handle invalid chunked-binary-format length gracefully\n   + (smile) Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded)\n   + (smile)  ArrayIndexOutOfBoundsException in SmileParser._decodeShortUnicodeValue()\n   + (smile) Handle sequence of Smile header markers without recursion\n   + (cbor) CBOR loses 'Map' entries with specific 'long' Map key values (32-bit boundary)\n   + (ion) Ion Polymorphic deserialization in 2.12 breaks wrt use of Native Type Ids \n     when upgrading from 2.8\n   + (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser' for invalid UTF-8 String\n   + (cbor) Handle invalid CBOR content like '[0x84]' (incomplete array)\n   + (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in 'EnumAsIonSymbolSerializer'\n   + (ion) Add support for generating IonSexps\n   + (ion) Add support for deserializing IonTimestamps and IonBlobs\n   + (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /\n      '.builderforTextualWriters()' convenience methods\n   + (ion) Enabling pretty-printing fails Ion serialization\n   + (ion) Allow disabling native type ids in IonMapper\n   + (smile) Small bug in byte-alignment for long field names\n      in Smile, symbol table reuse\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (ion) Optimize 'IonParser.getNumberType()' using\n      'IonReader.getIntegerSize()'\n   + (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'\n      for lenient handling of Unicode surrogate pairs on writing\n   + (cbor) Add support for decoding unassigned 'simple\n      values' (type 7)\n   + Add Gradle Module Metadata\n      (https://blog.gradle.org/alignment-with-gradle-module-metadata)\n   + (avro) Cache record names to avoid hitting class loader\n   + (avro) Avro null deserialization\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to\n      support binary writes, fix 'java.util.UUID' representation\n   + (ion) Allow 'IonObjectMapper' with class name annotation\n      introspector to deserialize generic subtypes\n   + Remove dependencies upon Jackson 1.X and Avro's\n      JacksonUtils\n   + 'jackson-databind' should not be full dependency for\n      (cbor, protobuf, smile) modules\n   + 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not\n      write most compact form for all integers\n   + 'AvroGenerator' overrides 'getOutputContext()' properly\n   + (ion) Add 'IonFactory.getIonSystem()' accessor\n   + (avro) Fix schema evolution involving maps of non-scalar\n   + (protobuf) Parsing a protobuf message doesn't properly skip unknown fields\n   + (ion) IonObjectMapper close()s the provided IonWriter unnecessarily\n   + ion-java dependency 1.4.0 -\u003e 1.5.1  \n  ","status":"published","published":"2022-05-16T08:19:25Z","modified":"2026-02-04T03:56:10.873321Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}