{"schema_version":"2","view":"grouped","data":[{"id":72022,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-wm37-cmc6-48r8","summary":"CGA-wm37-cmc6-48r8","evidence":"osv:CGA-wm37-cmc6-48r8","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm37-cmc6-48r8","aliases":["CGA-wm37-cmc6-48r8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm37-cmc6-48r8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:11Z"}]}}],"modified":"2026-10-02T23:01:54.081949052Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm37-cmc6-48r8","advisory_id":"ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","event_types":["advisory"],"published_at":"2026-10-26T00:10:19.564232+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:23+00:00","detail_url":"/advisories/advisory%3Aae7a98f8-700a-46d2-b41d-e02e4ee9fe24","group":{"id":"advisory:ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","revision":1,"primary_event_id":72632,"change":"published","superseded_by":[],"changed":{"id":72632,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-wm37-cmc6-48r8","summary":"CGA-wm37-cmc6-48r8","evidence":"osv:CGA-wm37-cmc6-48r8","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm37-cmc6-48r8","aliases":["CGA-wm37-cmc6-48r8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm37-cmc6-48r8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:11Z"}]}}],"modified":"2026-10-02T23:01:54.081949052Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm37-cmc6-48r8","advisory_id":"ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","event_types":["advisory"],"published_at":"2026-10-26T00:10:19.564232+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:23+00:00","detail_url":"/events/72632"},"members":[{"id":72632,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-wm37-cmc6-48r8","summary":"CGA-wm37-cmc6-48r8","evidence":"osv:CGA-wm37-cmc6-48r8","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm37-cmc6-48r8","aliases":["CGA-wm37-cmc6-48r8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm37-cmc6-48r8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:11Z"}]}}],"modified":"2026-10-02T23:01:54.081949052Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm37-cmc6-48r8","advisory_id":"ae7a98f8-700a-46d2-b41d-e02e4ee9fe24","event_types":["advisory"],"published_at":"2026-10-26T00:10:19.564232+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:23+00:00","detail_url":"/events/72632"}]}},{"id":72019,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-xcww-3m95-5gpj","summary":"CGA-xcww-3m95-5gpj","evidence":"osv:CGA-xcww-3m95-5gpj","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xcww-3m95-5gpj","aliases":["CGA-xcww-3m95-5gpj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xcww-3m95-5gpj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:22:08Z"}]}}],"modified":"2026-10-02T23:01:52.726438269Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0872b0b4-6bdf-42b2-9257-9d688fb86c72","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xcww-3m95-5gpj","advisory_id":"0872b0b4-6bdf-42b2-9257-9d688fb86c72","event_types":["advisory"],"published_at":"2026-10-26T00:09:58.307604+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:46:17+00:00","detail_url":"/advisories/advisory%3A0872b0b4-6bdf-42b2-9257-9d688fb86c72","group":{"id":"advisory:0872b0b4-6bdf-42b2-9257-9d688fb86c72","revision":1,"primary_event_id":72626,"change":"published","superseded_by":[],"changed":{"id":72626,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-xcww-3m95-5gpj","summary":"CGA-xcww-3m95-5gpj","evidence":"osv:CGA-xcww-3m95-5gpj","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xcww-3m95-5gpj","aliases":["CGA-xcww-3m95-5gpj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xcww-3m95-5gpj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:22:08Z"}]}}],"modified":"2026-10-02T23:01:52.726438269Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0872b0b4-6bdf-42b2-9257-9d688fb86c72","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xcww-3m95-5gpj","advisory_id":"0872b0b4-6bdf-42b2-9257-9d688fb86c72","event_types":["advisory"],"published_at":"2026-10-26T00:09:58.307604+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:46:17+00:00","detail_url":"/events/72626"},"members":[{"id":72626,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-xcww-3m95-5gpj","summary":"CGA-xcww-3m95-5gpj","evidence":"osv:CGA-xcww-3m95-5gpj","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-xcww-3m95-5gpj","aliases":["CGA-xcww-3m95-5gpj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xcww-3m95-5gpj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:22:08Z"}]}}],"modified":"2026-10-02T23:01:52.726438269Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0872b0b4-6bdf-42b2-9257-9d688fb86c72","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xcww-3m95-5gpj","advisory_id":"0872b0b4-6bdf-42b2-9257-9d688fb86c72","event_types":["advisory"],"published_at":"2026-10-26T00:09:58.307604+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:46:17+00:00","detail_url":"/events/72626"}]}},{"id":72012,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-w3fw-22rv-5c49","summary":"CGA-w3fw-22rv-5c49","evidence":"osv:CGA-w3fw-22rv-5c49","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3fw-22rv-5c49","aliases":["CGA-w3fw-22rv-5c49"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}}],"modified":"2026-10-02T23:01:50.196032924Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2997d51-80c9-42b3-a981-25069294c17c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3fw-22rv-5c49","advisory_id":"f2997d51-80c9-42b3-a981-25069294c17c","event_types":["advisory"],"published_at":"2026-10-26T00:08:15.720494+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:11:43+00:00","detail_url":"/advisories/advisory%3Af2997d51-80c9-42b3-a981-25069294c17c","group":{"id":"advisory:f2997d51-80c9-42b3-a981-25069294c17c","revision":1,"primary_event_id":72601,"change":"published","superseded_by":[],"changed":{"id":72601,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-w3fw-22rv-5c49","summary":"CGA-w3fw-22rv-5c49","evidence":"osv:CGA-w3fw-22rv-5c49","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3fw-22rv-5c49","aliases":["CGA-w3fw-22rv-5c49"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}}],"modified":"2026-10-02T23:01:50.196032924Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2997d51-80c9-42b3-a981-25069294c17c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3fw-22rv-5c49","advisory_id":"f2997d51-80c9-42b3-a981-25069294c17c","event_types":["advisory"],"published_at":"2026-10-26T00:08:15.720494+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:11:43+00:00","detail_url":"/events/72601"},"members":[{"id":72601,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-w3fw-22rv-5c49","summary":"CGA-w3fw-22rv-5c49","evidence":"osv:CGA-w3fw-22rv-5c49","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-w3fw-22rv-5c49","aliases":["CGA-w3fw-22rv-5c49"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w3fw-22rv-5c49.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:13:14Z"}]}}],"modified":"2026-10-02T23:01:50.196032924Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f2997d51-80c9-42b3-a981-25069294c17c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w3fw-22rv-5c49","advisory_id":"f2997d51-80c9-42b3-a981-25069294c17c","event_types":["advisory"],"published_at":"2026-10-26T00:08:15.720494+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:11:43+00:00","detail_url":"/events/72601"}]}},{"id":71981,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5w5-42mm-jhqp","summary":"CGA-v5w5-42mm-jhqp","evidence":"osv:CGA-v5w5-42mm-jhqp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5w5-42mm-jhqp","aliases":["CGA-v5w5-42mm-jhqp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5w5-42mm-jhqp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:47.770377587Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4dc2216a-cc9e-4a16-8dcb-310618365b8e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5w5-42mm-jhqp","advisory_id":"4dc2216a-cc9e-4a16-8dcb-310618365b8e","event_types":["advisory"],"published_at":"2026-10-26T00:03:19.801682+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:24+00:00","detail_url":"/advisories/advisory%3A4dc2216a-cc9e-4a16-8dcb-310618365b8e","group":{"id":"advisory:4dc2216a-cc9e-4a16-8dcb-310618365b8e","revision":1,"primary_event_id":72554,"change":"published","superseded_by":[],"changed":{"id":72554,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5w5-42mm-jhqp","summary":"CGA-v5w5-42mm-jhqp","evidence":"osv:CGA-v5w5-42mm-jhqp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5w5-42mm-jhqp","aliases":["CGA-v5w5-42mm-jhqp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5w5-42mm-jhqp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:47.770377587Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4dc2216a-cc9e-4a16-8dcb-310618365b8e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5w5-42mm-jhqp","advisory_id":"4dc2216a-cc9e-4a16-8dcb-310618365b8e","event_types":["advisory"],"published_at":"2026-10-26T00:03:19.801682+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:24+00:00","detail_url":"/events/72554"},"members":[{"id":72554,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5w5-42mm-jhqp","summary":"CGA-v5w5-42mm-jhqp","evidence":"osv:CGA-v5w5-42mm-jhqp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5w5-42mm-jhqp","aliases":["CGA-v5w5-42mm-jhqp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5w5-42mm-jhqp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:47.770377587Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4dc2216a-cc9e-4a16-8dcb-310618365b8e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5w5-42mm-jhqp","advisory_id":"4dc2216a-cc9e-4a16-8dcb-310618365b8e","event_types":["advisory"],"published_at":"2026-10-26T00:03:19.801682+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:24+00:00","detail_url":"/events/72554"}]}},{"id":71956,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-rgw8-9c6h-r7p4","summary":"CGA-rgw8-9c6h-r7p4","evidence":"osv:CGA-rgw8-9c6h-r7p4","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rgw8-9c6h-r7p4","aliases":["CGA-rgw8-9c6h-r7p4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgw8-9c6h-r7p4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:59Z"}]}}],"modified":"2026-10-02T23:01:45.452065692Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a898b35d-847c-4512-823a-9d065aef36a2","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgw8-9c6h-r7p4","advisory_id":"a898b35d-847c-4512-823a-9d065aef36a2","event_types":["advisory"],"published_at":"2026-10-25T23:59:53.03685+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:48+00:00","detail_url":"/advisories/advisory%3Aa898b35d-847c-4512-823a-9d065aef36a2","group":{"id":"advisory:a898b35d-847c-4512-823a-9d065aef36a2","revision":1,"primary_event_id":72515,"change":"published","superseded_by":[],"changed":{"id":72515,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-rgw8-9c6h-r7p4","summary":"CGA-rgw8-9c6h-r7p4","evidence":"osv:CGA-rgw8-9c6h-r7p4","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rgw8-9c6h-r7p4","aliases":["CGA-rgw8-9c6h-r7p4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgw8-9c6h-r7p4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:59Z"}]}}],"modified":"2026-10-02T23:01:45.452065692Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a898b35d-847c-4512-823a-9d065aef36a2","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgw8-9c6h-r7p4","advisory_id":"a898b35d-847c-4512-823a-9d065aef36a2","event_types":["advisory"],"published_at":"2026-10-25T23:59:53.03685+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:48+00:00","detail_url":"/events/72515"},"members":[{"id":72515,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-rgw8-9c6h-r7p4","summary":"CGA-rgw8-9c6h-r7p4","evidence":"osv:CGA-rgw8-9c6h-r7p4","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rgw8-9c6h-r7p4","aliases":["CGA-rgw8-9c6h-r7p4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgw8-9c6h-r7p4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:59Z"}]}}],"modified":"2026-10-02T23:01:45.452065692Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a898b35d-847c-4512-823a-9d065aef36a2","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgw8-9c6h-r7p4","advisory_id":"a898b35d-847c-4512-823a-9d065aef36a2","event_types":["advisory"],"published_at":"2026-10-25T23:59:53.03685+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:48+00:00","detail_url":"/events/72515"}]}},{"id":71953,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qgrw-qf95-f996","summary":"CGA-qgrw-qf95-f996","evidence":"osv:CGA-qgrw-qf95-f996","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qgrw-qf95-f996","aliases":["CGA-qgrw-qf95-f996"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:01:44.898588599Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc0b80b9-591b-49c1-8658-769de4c8ff7d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qgrw-qf95-f996","advisory_id":"fc0b80b9-591b-49c1-8658-769de4c8ff7d","event_types":["advisory"],"published_at":"2026-10-25T23:59:23.98923+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:55+00:00","detail_url":"/advisories/advisory%3Afc0b80b9-591b-49c1-8658-769de4c8ff7d","group":{"id":"advisory:fc0b80b9-591b-49c1-8658-769de4c8ff7d","revision":1,"primary_event_id":72509,"change":"published","superseded_by":[],"changed":{"id":72509,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qgrw-qf95-f996","summary":"CGA-qgrw-qf95-f996","evidence":"osv:CGA-qgrw-qf95-f996","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qgrw-qf95-f996","aliases":["CGA-qgrw-qf95-f996"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:01:44.898588599Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc0b80b9-591b-49c1-8658-769de4c8ff7d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qgrw-qf95-f996","advisory_id":"fc0b80b9-591b-49c1-8658-769de4c8ff7d","event_types":["advisory"],"published_at":"2026-10-25T23:59:23.98923+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:55+00:00","detail_url":"/events/72509"},"members":[{"id":72509,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qgrw-qf95-f996","summary":"CGA-qgrw-qf95-f996","evidence":"osv:CGA-qgrw-qf95-f996","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qgrw-qf95-f996","aliases":["CGA-qgrw-qf95-f996"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qgrw-qf95-f996.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/lib/tools/upgrade-cli/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:01:44.898588599Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fc0b80b9-591b-49c1-8658-769de4c8ff7d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qgrw-qf95-f996","advisory_id":"fc0b80b9-591b-49c1-8658-769de4c8ff7d","event_types":["advisory"],"published_at":"2026-10-25T23:59:23.98923+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:55+00:00","detail_url":"/events/72509"}]}},{"id":71925,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p438-vcmc-v8xm","summary":"CGA-p438-vcmc-v8xm","evidence":"osv:CGA-p438-vcmc-v8xm","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p438-vcmc-v8xm","aliases":["CGA-p438-vcmc-v8xm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p438-vcmc-v8xm.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:13Z"}]}}],"modified":"2026-10-02T23:01:40.948827785Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0618f336-1099-4f65-b856-62cbfc2f5d7e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p438-vcmc-v8xm","advisory_id":"0618f336-1099-4f65-b856-62cbfc2f5d7e","event_types":["advisory"],"published_at":"2026-10-25T23:56:02.271343+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:20+00:00","detail_url":"/advisories/advisory%3A0618f336-1099-4f65-b856-62cbfc2f5d7e","group":{"id":"advisory:0618f336-1099-4f65-b856-62cbfc2f5d7e","revision":1,"primary_event_id":72464,"change":"published","superseded_by":[],"changed":{"id":72464,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p438-vcmc-v8xm","summary":"CGA-p438-vcmc-v8xm","evidence":"osv:CGA-p438-vcmc-v8xm","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p438-vcmc-v8xm","aliases":["CGA-p438-vcmc-v8xm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p438-vcmc-v8xm.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:13Z"}]}}],"modified":"2026-10-02T23:01:40.948827785Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0618f336-1099-4f65-b856-62cbfc2f5d7e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p438-vcmc-v8xm","advisory_id":"0618f336-1099-4f65-b856-62cbfc2f5d7e","event_types":["advisory"],"published_at":"2026-10-25T23:56:02.271343+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:20+00:00","detail_url":"/events/72464"},"members":[{"id":72464,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p438-vcmc-v8xm","summary":"CGA-p438-vcmc-v8xm","evidence":"osv:CGA-p438-vcmc-v8xm","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p438-vcmc-v8xm","aliases":["CGA-p438-vcmc-v8xm"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p438-vcmc-v8xm.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:13Z"}]}}],"modified":"2026-10-02T23:01:40.948827785Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0618f336-1099-4f65-b856-62cbfc2f5d7e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p438-vcmc-v8xm","advisory_id":"0618f336-1099-4f65-b856-62cbfc2f5d7e","event_types":["advisory"],"published_at":"2026-10-25T23:56:02.271343+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:20+00:00","detail_url":"/events/72464"}]}},{"id":71890,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-m9wr-58qr-vv6w","summary":"CGA-m9wr-58qr-vv6w","evidence":"osv:CGA-m9wr-58qr-vv6w","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m9wr-58qr-vv6w","aliases":["CGA-m9wr-58qr-vv6w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m9wr-58qr-vv6w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:37.642428327Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2065e80c-b336-4fa7-86b0-aab5a8849596","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m9wr-58qr-vv6w","advisory_id":"2065e80c-b336-4fa7-86b0-aab5a8849596","event_types":["advisory"],"published_at":"2026-10-25T23:48:50.750804+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:55+00:00","detail_url":"/advisories/advisory%3A2065e80c-b336-4fa7-86b0-aab5a8849596","group":{"id":"advisory:2065e80c-b336-4fa7-86b0-aab5a8849596","revision":1,"primary_event_id":72403,"change":"published","superseded_by":[],"changed":{"id":72403,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-m9wr-58qr-vv6w","summary":"CGA-m9wr-58qr-vv6w","evidence":"osv:CGA-m9wr-58qr-vv6w","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m9wr-58qr-vv6w","aliases":["CGA-m9wr-58qr-vv6w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m9wr-58qr-vv6w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:37.642428327Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2065e80c-b336-4fa7-86b0-aab5a8849596","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m9wr-58qr-vv6w","advisory_id":"2065e80c-b336-4fa7-86b0-aab5a8849596","event_types":["advisory"],"published_at":"2026-10-25T23:48:50.750804+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:55+00:00","detail_url":"/events/72403"},"members":[{"id":72403,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-m9wr-58qr-vv6w","summary":"CGA-m9wr-58qr-vv6w","evidence":"osv:CGA-m9wr-58qr-vv6w","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m9wr-58qr-vv6w","aliases":["CGA-m9wr-58qr-vv6w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m9wr-58qr-vv6w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:37.642428327Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2065e80c-b336-4fa7-86b0-aab5a8849596","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m9wr-58qr-vv6w","advisory_id":"2065e80c-b336-4fa7-86b0-aab5a8849596","event_types":["advisory"],"published_at":"2026-10-25T23:48:50.750804+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:55+00:00","detail_url":"/events/72403"}]}},{"id":71863,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-hrcp-92qg-992r","summary":"CGA-hrcp-92qg-992r","evidence":"osv:CGA-hrcp-92qg-992r","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrcp-92qg-992r","aliases":["CGA-hrcp-92qg-992r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrcp-92qg-992r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:38:09Z"}]}}],"modified":"2026-10-02T23:01:34.889578183Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:523eb45e-3f20-4f4f-b319-302bee0f6913","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrcp-92qg-992r","advisory_id":"523eb45e-3f20-4f4f-b319-302bee0f6913","event_types":["advisory"],"published_at":"2026-10-25T23:45:26.917505+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:53:13+00:00","detail_url":"/advisories/advisory%3A523eb45e-3f20-4f4f-b319-302bee0f6913","group":{"id":"advisory:523eb45e-3f20-4f4f-b319-302bee0f6913","revision":1,"primary_event_id":72358,"change":"published","superseded_by":[],"changed":{"id":72358,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-hrcp-92qg-992r","summary":"CGA-hrcp-92qg-992r","evidence":"osv:CGA-hrcp-92qg-992r","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrcp-92qg-992r","aliases":["CGA-hrcp-92qg-992r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrcp-92qg-992r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:38:09Z"}]}}],"modified":"2026-10-02T23:01:34.889578183Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:523eb45e-3f20-4f4f-b319-302bee0f6913","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrcp-92qg-992r","advisory_id":"523eb45e-3f20-4f4f-b319-302bee0f6913","event_types":["advisory"],"published_at":"2026-10-25T23:45:26.917505+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:53:13+00:00","detail_url":"/events/72358"},"members":[{"id":72358,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-hrcp-92qg-992r","summary":"CGA-hrcp-92qg-992r","evidence":"osv:CGA-hrcp-92qg-992r","products":[{"name":{"value":"opensearch-2-sql","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hrcp-92qg-992r","aliases":["CGA-hrcp-92qg-992r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-sql","purl":"pkg:apk/chainguard/opensearch-2-sql?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hrcp-92qg-992r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-sql/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:38:09Z"}]}}],"modified":"2026-10-02T23:01:34.889578183Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:523eb45e-3f20-4f4f-b319-302bee0f6913","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hrcp-92qg-992r","advisory_id":"523eb45e-3f20-4f4f-b319-302bee0f6913","event_types":["advisory"],"published_at":"2026-10-25T23:45:26.917505+00:00","technologies":["core-osv","opensearch-2-sql"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:53:13+00:00","detail_url":"/events/72358"}]}},{"id":71846,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-h6gc-4cp6-98h2","summary":"CGA-h6gc-4cp6-98h2","evidence":"osv:CGA-h6gc-4cp6-98h2","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h6gc-4cp6-98h2","aliases":["CGA-h6gc-4cp6-98h2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h6gc-4cp6-98h2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:33.587948592Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1cd51ddb-c53d-41e2-a967-e15fb4d86f07","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h6gc-4cp6-98h2","advisory_id":"1cd51ddb-c53d-41e2-a967-e15fb4d86f07","event_types":["advisory"],"published_at":"2026-10-25T23:44:05.734826+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:24:36+00:00","detail_url":"/advisories/advisory%3A1cd51ddb-c53d-41e2-a967-e15fb4d86f07","group":{"id":"advisory:1cd51ddb-c53d-41e2-a967-e15fb4d86f07","revision":1,"primary_event_id":72340,"change":"published","superseded_by":[],"changed":{"id":72340,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-h6gc-4cp6-98h2","summary":"CGA-h6gc-4cp6-98h2","evidence":"osv:CGA-h6gc-4cp6-98h2","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h6gc-4cp6-98h2","aliases":["CGA-h6gc-4cp6-98h2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h6gc-4cp6-98h2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:33.587948592Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1cd51ddb-c53d-41e2-a967-e15fb4d86f07","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h6gc-4cp6-98h2","advisory_id":"1cd51ddb-c53d-41e2-a967-e15fb4d86f07","event_types":["advisory"],"published_at":"2026-10-25T23:44:05.734826+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:24:36+00:00","detail_url":"/events/72340"},"members":[{"id":72340,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-h6gc-4cp6-98h2","summary":"CGA-h6gc-4cp6-98h2","evidence":"osv:CGA-h6gc-4cp6-98h2","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h6gc-4cp6-98h2","aliases":["CGA-h6gc-4cp6-98h2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h6gc-4cp6-98h2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:33.587948592Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1cd51ddb-c53d-41e2-a967-e15fb4d86f07","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h6gc-4cp6-98h2","advisory_id":"1cd51ddb-c53d-41e2-a967-e15fb4d86f07","event_types":["advisory"],"published_at":"2026-10-25T23:44:05.734826+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:24:36+00:00","detail_url":"/events/72340"}]}},{"id":71817,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cmr7-wxgf-5mjx","summary":"CGA-cmr7-wxgf-5mjx","evidence":"osv:CGA-cmr7-wxgf-5mjx","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cmr7-wxgf-5mjx","aliases":["CGA-cmr7-wxgf-5mjx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmr7-wxgf-5mjx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:02:09Z"}]}}],"modified":"2026-10-02T23:01:30.340307768Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmr7-wxgf-5mjx","advisory_id":"0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","event_types":["advisory"],"published_at":"2026-10-25T23:40:37.543352+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:26:17+00:00","detail_url":"/advisories/advisory%3A0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","group":{"id":"advisory:0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","revision":1,"primary_event_id":72289,"change":"published","superseded_by":[],"changed":{"id":72289,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cmr7-wxgf-5mjx","summary":"CGA-cmr7-wxgf-5mjx","evidence":"osv:CGA-cmr7-wxgf-5mjx","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cmr7-wxgf-5mjx","aliases":["CGA-cmr7-wxgf-5mjx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmr7-wxgf-5mjx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:02:09Z"}]}}],"modified":"2026-10-02T23:01:30.340307768Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmr7-wxgf-5mjx","advisory_id":"0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","event_types":["advisory"],"published_at":"2026-10-25T23:40:37.543352+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:26:17+00:00","detail_url":"/events/72289"},"members":[{"id":72289,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cmr7-wxgf-5mjx","summary":"CGA-cmr7-wxgf-5mjx","evidence":"osv:CGA-cmr7-wxgf-5mjx","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cmr7-wxgf-5mjx","aliases":["CGA-cmr7-wxgf-5mjx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmr7-wxgf-5mjx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:02:09Z"}]}}],"modified":"2026-10-02T23:01:30.340307768Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmr7-wxgf-5mjx","advisory_id":"0d4d74a2-c116-4ea1-b4c5-5f99417a1c9f","event_types":["advisory"],"published_at":"2026-10-25T23:40:37.543352+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:26:17+00:00","detail_url":"/events/72289"}]}},{"id":71816,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cx79-jcg4-c7wp","summary":"CGA-cx79-jcg4-c7wp","evidence":"osv:CGA-cx79-jcg4-c7wp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cx79-jcg4-c7wp","aliases":["CGA-cx79-jcg4-c7wp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cx79-jcg4-c7wp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:30.334693829Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d4679e6-f53f-4de2-9163-4a7124a3604f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cx79-jcg4-c7wp","advisory_id":"9d4679e6-f53f-4de2-9163-4a7124a3604f","event_types":["advisory"],"published_at":"2026-10-25T23:40:20.878553+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:21+00:00","detail_url":"/advisories/advisory%3A9d4679e6-f53f-4de2-9163-4a7124a3604f","group":{"id":"advisory:9d4679e6-f53f-4de2-9163-4a7124a3604f","revision":1,"primary_event_id":72286,"change":"published","superseded_by":[],"changed":{"id":72286,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cx79-jcg4-c7wp","summary":"CGA-cx79-jcg4-c7wp","evidence":"osv:CGA-cx79-jcg4-c7wp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cx79-jcg4-c7wp","aliases":["CGA-cx79-jcg4-c7wp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cx79-jcg4-c7wp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:30.334693829Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d4679e6-f53f-4de2-9163-4a7124a3604f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cx79-jcg4-c7wp","advisory_id":"9d4679e6-f53f-4de2-9163-4a7124a3604f","event_types":["advisory"],"published_at":"2026-10-25T23:40:20.878553+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:21+00:00","detail_url":"/events/72286"},"members":[{"id":72286,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-cx79-jcg4-c7wp","summary":"CGA-cx79-jcg4-c7wp","evidence":"osv:CGA-cx79-jcg4-c7wp","products":[{"name":{"value":"logstash-fips-9.4-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cx79-jcg4-c7wp","aliases":["CGA-cx79-jcg4-c7wp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cx79-jcg4-c7wp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:16:12Z"}]}}],"modified":"2026-10-02T23:01:30.334693829Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d4679e6-f53f-4de2-9163-4a7124a3604f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cx79-jcg4-c7wp","advisory_id":"9d4679e6-f53f-4de2-9163-4a7124a3604f","event_types":["advisory"],"published_at":"2026-10-25T23:40:20.878553+00:00","technologies":["core-osv","logstash-fips-9-4-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:44:21+00:00","detail_url":"/events/72286"}]}},{"id":71808,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-96j8-2vw9-mq3j","summary":"CGA-96j8-2vw9-mq3j","evidence":"osv:CGA-96j8-2vw9-mq3j","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-96j8-2vw9-mq3j","aliases":["CGA-96j8-2vw9-mq3j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-96j8-2vw9-mq3j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:36:08Z"}]}}],"modified":"2026-10-02T23:01:29.531520428Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:45537aa0-4772-4c0d-9373-99d3b0d64347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-96j8-2vw9-mq3j","advisory_id":"45537aa0-4772-4c0d-9373-99d3b0d64347","event_types":["advisory"],"published_at":"2026-10-25T23:39:41.147603+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:37:48+00:00","detail_url":"/advisories/advisory%3A45537aa0-4772-4c0d-9373-99d3b0d64347","group":{"id":"advisory:45537aa0-4772-4c0d-9373-99d3b0d64347","revision":1,"primary_event_id":72278,"change":"published","superseded_by":[],"changed":{"id":72278,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-96j8-2vw9-mq3j","summary":"CGA-96j8-2vw9-mq3j","evidence":"osv:CGA-96j8-2vw9-mq3j","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-96j8-2vw9-mq3j","aliases":["CGA-96j8-2vw9-mq3j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-96j8-2vw9-mq3j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:36:08Z"}]}}],"modified":"2026-10-02T23:01:29.531520428Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:45537aa0-4772-4c0d-9373-99d3b0d64347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-96j8-2vw9-mq3j","advisory_id":"45537aa0-4772-4c0d-9373-99d3b0d64347","event_types":["advisory"],"published_at":"2026-10-25T23:39:41.147603+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:37:48+00:00","detail_url":"/events/72278"},"members":[{"id":72278,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-96j8-2vw9-mq3j","summary":"CGA-96j8-2vw9-mq3j","evidence":"osv:CGA-96j8-2vw9-mq3j","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-96j8-2vw9-mq3j","aliases":["CGA-96j8-2vw9-mq3j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-96j8-2vw9-mq3j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:36:08Z"}]}}],"modified":"2026-10-02T23:01:29.531520428Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:45537aa0-4772-4c0d-9373-99d3b0d64347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-96j8-2vw9-mq3j","advisory_id":"45537aa0-4772-4c0d-9373-99d3b0d64347","event_types":["advisory"],"published_at":"2026-10-25T23:39:41.147603+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:37:48+00:00","detail_url":"/events/72278"}]}},{"id":71793,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7p6x-cpvg-96mc","summary":"CGA-7p6x-cpvg-96mc","evidence":"osv:CGA-7p6x-cpvg-96mc","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7p6x-cpvg-96mc","aliases":["CGA-7p6x-cpvg-96mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7p6x-cpvg-96mc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:32:07Z"}]}}],"modified":"2026-10-02T23:01:27.967276742Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd0573f7-d140-4aad-90d4-f90445f7b347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7p6x-cpvg-96mc","advisory_id":"bd0573f7-d140-4aad-90d4-f90445f7b347","event_types":["advisory"],"published_at":"2026-10-25T23:38:43.015936+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:03:56+00:00","detail_url":"/advisories/advisory%3Abd0573f7-d140-4aad-90d4-f90445f7b347","group":{"id":"advisory:bd0573f7-d140-4aad-90d4-f90445f7b347","revision":1,"primary_event_id":72262,"change":"published","superseded_by":[],"changed":{"id":72262,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7p6x-cpvg-96mc","summary":"CGA-7p6x-cpvg-96mc","evidence":"osv:CGA-7p6x-cpvg-96mc","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7p6x-cpvg-96mc","aliases":["CGA-7p6x-cpvg-96mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7p6x-cpvg-96mc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:32:07Z"}]}}],"modified":"2026-10-02T23:01:27.967276742Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd0573f7-d140-4aad-90d4-f90445f7b347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7p6x-cpvg-96mc","advisory_id":"bd0573f7-d140-4aad-90d4-f90445f7b347","event_types":["advisory"],"published_at":"2026-10-25T23:38:43.015936+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:03:56+00:00","detail_url":"/events/72262"},"members":[{"id":72262,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7p6x-cpvg-96mc","summary":"CGA-7p6x-cpvg-96mc","evidence":"osv:CGA-7p6x-cpvg-96mc","products":[{"name":{"value":"datahub-gms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7p6x-cpvg-96mc","aliases":["CGA-7p6x-cpvg-96mc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms","purl":"pkg:apk/chainguard/datahub-gms?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7p6x-cpvg-96mc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:32:07Z"}]}}],"modified":"2026-10-02T23:01:27.967276742Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:bd0573f7-d140-4aad-90d4-f90445f7b347","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7p6x-cpvg-96mc","advisory_id":"bd0573f7-d140-4aad-90d4-f90445f7b347","event_types":["advisory"],"published_at":"2026-10-25T23:38:43.015936+00:00","technologies":["core-osv","datahub-gms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:03:56+00:00","detail_url":"/events/72262"}]}},{"id":71780,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-c7m7-46pq-76f8","summary":"CGA-c7m7-46pq-76f8","evidence":"osv:CGA-c7m7-46pq-76f8","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7m7-46pq-76f8","aliases":["CGA-c7m7-46pq-76f8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7m7-46pq-76f8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:15Z"}]}}],"modified":"2026-10-02T23:01:27.120090946Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff9eca86-2f6a-44b7-99a2-47a92326867e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7m7-46pq-76f8","advisory_id":"ff9eca86-2f6a-44b7-99a2-47a92326867e","event_types":["advisory"],"published_at":"2026-10-25T23:37:07.420493+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/advisories/advisory%3Aff9eca86-2f6a-44b7-99a2-47a92326867e","group":{"id":"advisory:ff9eca86-2f6a-44b7-99a2-47a92326867e","revision":1,"primary_event_id":72242,"change":"published","superseded_by":[],"changed":{"id":72242,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-c7m7-46pq-76f8","summary":"CGA-c7m7-46pq-76f8","evidence":"osv:CGA-c7m7-46pq-76f8","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7m7-46pq-76f8","aliases":["CGA-c7m7-46pq-76f8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7m7-46pq-76f8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:15Z"}]}}],"modified":"2026-10-02T23:01:27.120090946Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff9eca86-2f6a-44b7-99a2-47a92326867e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7m7-46pq-76f8","advisory_id":"ff9eca86-2f6a-44b7-99a2-47a92326867e","event_types":["advisory"],"published_at":"2026-10-25T23:37:07.420493+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/events/72242"},"members":[{"id":72242,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-c7m7-46pq-76f8","summary":"CGA-c7m7-46pq-76f8","evidence":"osv:CGA-c7m7-46pq-76f8","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7m7-46pq-76f8","aliases":["CGA-c7m7-46pq-76f8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7m7-46pq-76f8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:15Z"}]}}],"modified":"2026-10-02T23:01:27.120090946Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff9eca86-2f6a-44b7-99a2-47a92326867e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7m7-46pq-76f8","advisory_id":"ff9eca86-2f6a-44b7-99a2-47a92326867e","event_types":["advisory"],"published_at":"2026-10-25T23:37:07.420493+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/events/72242"}]}},{"id":71776,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qhh4-8879-v2g7","summary":"CGA-qhh4-8879-v2g7","evidence":"osv:CGA-qhh4-8879-v2g7","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qhh4-8879-v2g7","aliases":["CGA-qhh4-8879-v2g7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qhh4-8879-v2g7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:26.617463518Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ecea4dcf-580e-44bc-9693-3ec80de090df","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qhh4-8879-v2g7","advisory_id":"ecea4dcf-580e-44bc-9693-3ec80de090df","event_types":["advisory"],"published_at":"2026-10-25T23:36:54.262587+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:50+00:00","detail_url":"/advisories/advisory%3Aecea4dcf-580e-44bc-9693-3ec80de090df","group":{"id":"advisory:ecea4dcf-580e-44bc-9693-3ec80de090df","revision":1,"primary_event_id":72238,"change":"published","superseded_by":[],"changed":{"id":72238,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qhh4-8879-v2g7","summary":"CGA-qhh4-8879-v2g7","evidence":"osv:CGA-qhh4-8879-v2g7","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qhh4-8879-v2g7","aliases":["CGA-qhh4-8879-v2g7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qhh4-8879-v2g7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:26.617463518Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ecea4dcf-580e-44bc-9693-3ec80de090df","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qhh4-8879-v2g7","advisory_id":"ecea4dcf-580e-44bc-9693-3ec80de090df","event_types":["advisory"],"published_at":"2026-10-25T23:36:54.262587+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:50+00:00","detail_url":"/events/72238"},"members":[{"id":72238,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qhh4-8879-v2g7","summary":"CGA-qhh4-8879-v2g7","evidence":"osv:CGA-qhh4-8879-v2g7","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qhh4-8879-v2g7","aliases":["CGA-qhh4-8879-v2g7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qhh4-8879-v2g7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:26.617463518Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ecea4dcf-580e-44bc-9693-3ec80de090df","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qhh4-8879-v2g7","advisory_id":"ecea4dcf-580e-44bc-9693-3ec80de090df","event_types":["advisory"],"published_at":"2026-10-25T23:36:54.262587+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:50+00:00","detail_url":"/events/72238"}]}},{"id":71752,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-5g68-5rp6-mcrf","summary":"CGA-5g68-5rp6-mcrf","evidence":"osv:CGA-5g68-5rp6-mcrf","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5g68-5rp6-mcrf","aliases":["CGA-5g68-5rp6-mcrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5g68-5rp6-mcrf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:23.807306875Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58f24452-8e7c-4412-884a-aeef4aadab9c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5g68-5rp6-mcrf","advisory_id":"58f24452-8e7c-4412-884a-aeef4aadab9c","event_types":["advisory"],"published_at":"2026-10-25T23:34:44.9703+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:29+00:00","detail_url":"/advisories/advisory%3A58f24452-8e7c-4412-884a-aeef4aadab9c","group":{"id":"advisory:58f24452-8e7c-4412-884a-aeef4aadab9c","revision":1,"primary_event_id":72201,"change":"published","superseded_by":[],"changed":{"id":72201,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-5g68-5rp6-mcrf","summary":"CGA-5g68-5rp6-mcrf","evidence":"osv:CGA-5g68-5rp6-mcrf","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5g68-5rp6-mcrf","aliases":["CGA-5g68-5rp6-mcrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5g68-5rp6-mcrf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:23.807306875Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58f24452-8e7c-4412-884a-aeef4aadab9c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5g68-5rp6-mcrf","advisory_id":"58f24452-8e7c-4412-884a-aeef4aadab9c","event_types":["advisory"],"published_at":"2026-10-25T23:34:44.9703+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:29+00:00","detail_url":"/events/72201"},"members":[{"id":72201,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-5g68-5rp6-mcrf","summary":"CGA-5g68-5rp6-mcrf","evidence":"osv:CGA-5g68-5rp6-mcrf","products":[{"name":{"value":"opensearch-2-crypto-kms","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5g68-5rp6-mcrf","aliases":["CGA-5g68-5rp6-mcrf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-crypto-kms","purl":"pkg:apk/chainguard/opensearch-2-crypto-kms?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5g68-5rp6-mcrf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-crypto-kms/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:32:59Z"}]}}],"modified":"2026-10-02T23:01:23.807306875Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58f24452-8e7c-4412-884a-aeef4aadab9c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5g68-5rp6-mcrf","advisory_id":"58f24452-8e7c-4412-884a-aeef4aadab9c","event_types":["advisory"],"published_at":"2026-10-25T23:34:44.9703+00:00","technologies":["core-osv","opensearch-2-crypto-kms"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:29+00:00","detail_url":"/events/72201"}]}},{"id":71685,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7868-vf8f-54g8","summary":"CGA-7868-vf8f-54g8","evidence":"osv:CGA-7868-vf8f-54g8","products":[{"name":{"value":"opensearch-2-ml-commons","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7868-vf8f-54g8","aliases":["CGA-7868-vf8f-54g8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-ml-commons","purl":"pkg:apk/chainguard/opensearch-2-ml-commons?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7868-vf8f-54g8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-ml/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:09Z"}]}}],"modified":"2026-10-02T23:01:17.292732667Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ffd1488a-833f-4d08-bdb9-5919f6b75c39","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7868-vf8f-54g8","advisory_id":"ffd1488a-833f-4d08-bdb9-5919f6b75c39","event_types":["advisory"],"published_at":"2026-10-25T23:29:08.092225+00:00","technologies":["core-osv","opensearch-2-ml-commons"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:34:19+00:00","detail_url":"/advisories/advisory%3Affd1488a-833f-4d08-bdb9-5919f6b75c39","group":{"id":"advisory:ffd1488a-833f-4d08-bdb9-5919f6b75c39","revision":1,"primary_event_id":72124,"change":"published","superseded_by":[],"changed":{"id":72124,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7868-vf8f-54g8","summary":"CGA-7868-vf8f-54g8","evidence":"osv:CGA-7868-vf8f-54g8","products":[{"name":{"value":"opensearch-2-ml-commons","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7868-vf8f-54g8","aliases":["CGA-7868-vf8f-54g8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-ml-commons","purl":"pkg:apk/chainguard/opensearch-2-ml-commons?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7868-vf8f-54g8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-ml/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:09Z"}]}}],"modified":"2026-10-02T23:01:17.292732667Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ffd1488a-833f-4d08-bdb9-5919f6b75c39","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7868-vf8f-54g8","advisory_id":"ffd1488a-833f-4d08-bdb9-5919f6b75c39","event_types":["advisory"],"published_at":"2026-10-25T23:29:08.092225+00:00","technologies":["core-osv","opensearch-2-ml-commons"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:34:19+00:00","detail_url":"/events/72124"},"members":[{"id":72124,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-7868-vf8f-54g8","summary":"CGA-7868-vf8f-54g8","evidence":"osv:CGA-7868-vf8f-54g8","products":[{"name":{"value":"opensearch-2-ml-commons","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-7868-vf8f-54g8","aliases":["CGA-7868-vf8f-54g8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-ml-commons","purl":"pkg:apk/chainguard/opensearch-2-ml-commons?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7868-vf8f-54g8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-ml/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:09Z"}]}}],"modified":"2026-10-02T23:01:17.292732667Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ffd1488a-833f-4d08-bdb9-5919f6b75c39","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7868-vf8f-54g8","advisory_id":"ffd1488a-833f-4d08-bdb9-5919f6b75c39","event_types":["advisory"],"published_at":"2026-10-25T23:29:08.092225+00:00","technologies":["core-osv","opensearch-2-ml-commons"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:34:19+00:00","detail_url":"/events/72124"}]}},{"id":71645,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-whm3-hxcm-79jr","summary":"CGA-whm3-hxcm-79jr","evidence":"osv:CGA-whm3-hxcm-79jr","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-whm3-hxcm-79jr","aliases":["CGA-whm3-hxcm-79jr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-whm3-hxcm-79jr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:14.393687076Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:996ecb5c-d4d4-4628-b6c7-304cdfad53fe","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-whm3-hxcm-79jr","advisory_id":"996ecb5c-d4d4-4628-b6c7-304cdfad53fe","event_types":["advisory"],"published_at":"2026-10-25T23:25:39.718341+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:48+00:00","detail_url":"/advisories/advisory%3A996ecb5c-d4d4-4628-b6c7-304cdfad53fe","group":{"id":"advisory:996ecb5c-d4d4-4628-b6c7-304cdfad53fe","revision":1,"primary_event_id":72077,"change":"published","superseded_by":[],"changed":{"id":72077,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-whm3-hxcm-79jr","summary":"CGA-whm3-hxcm-79jr","evidence":"osv:CGA-whm3-hxcm-79jr","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-whm3-hxcm-79jr","aliases":["CGA-whm3-hxcm-79jr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-whm3-hxcm-79jr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:14.393687076Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:996ecb5c-d4d4-4628-b6c7-304cdfad53fe","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-whm3-hxcm-79jr","advisory_id":"996ecb5c-d4d4-4628-b6c7-304cdfad53fe","event_types":["advisory"],"published_at":"2026-10-25T23:25:39.718341+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:48+00:00","detail_url":"/events/72077"},"members":[{"id":72077,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-whm3-hxcm-79jr","summary":"CGA-whm3-hxcm-79jr","evidence":"osv:CGA-whm3-hxcm-79jr","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-whm3-hxcm-79jr","aliases":["CGA-whm3-hxcm-79jr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-whm3-hxcm-79jr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:44Z"}]}}],"modified":"2026-10-02T23:01:14.393687076Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:996ecb5c-d4d4-4628-b6c7-304cdfad53fe","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-whm3-hxcm-79jr","advisory_id":"996ecb5c-d4d4-4628-b6c7-304cdfad53fe","event_types":["advisory"],"published_at":"2026-10-25T23:25:39.718341+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:48+00:00","detail_url":"/events/72077"}]}},{"id":71592,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-873p-4cvw-mphw","summary":"CGA-873p-4cvw-mphw","evidence":"osv:CGA-873p-4cvw-mphw","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-873p-4cvw-mphw","aliases":["CGA-873p-4cvw-mphw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-873p-4cvw-mphw.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:08Z"}]}}],"modified":"2026-10-02T23:01:08.086724744Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-873p-4cvw-mphw","advisory_id":"f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","event_types":["advisory"],"published_at":"2026-10-25T23:21:43.46162+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:18:42+00:00","detail_url":"/advisories/advisory%3Af89e2e80-41ea-4cfc-8edb-a83bbe4c229a","group":{"id":"advisory:f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","revision":1,"primary_event_id":72011,"change":"published","superseded_by":[],"changed":{"id":72011,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-873p-4cvw-mphw","summary":"CGA-873p-4cvw-mphw","evidence":"osv:CGA-873p-4cvw-mphw","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-873p-4cvw-mphw","aliases":["CGA-873p-4cvw-mphw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-873p-4cvw-mphw.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:08Z"}]}}],"modified":"2026-10-02T23:01:08.086724744Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-873p-4cvw-mphw","advisory_id":"f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","event_types":["advisory"],"published_at":"2026-10-25T23:21:43.46162+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:18:42+00:00","detail_url":"/events/72011"},"members":[{"id":72011,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-873p-4cvw-mphw","summary":"CGA-873p-4cvw-mphw","evidence":"osv:CGA-873p-4cvw-mphw","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-873p-4cvw-mphw","aliases":["CGA-873p-4cvw-mphw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-873p-4cvw-mphw.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:04:08Z"}]}}],"modified":"2026-10-02T23:01:08.086724744Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-873p-4cvw-mphw","advisory_id":"f89e2e80-41ea-4cfc-8edb-a83bbe4c229a","event_types":["advisory"],"published_at":"2026-10-25T23:21:43.46162+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:18:42+00:00","detail_url":"/events/72011"}]}},{"id":71586,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-73f4-xv58-ph22","summary":"CGA-73f4-xv58-ph22","evidence":"osv:CGA-73f4-xv58-ph22","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-73f4-xv58-ph22","aliases":["CGA-73f4-xv58-ph22"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-73f4-xv58-ph22.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:07.774342154Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d64b8f5b-de3e-47e2-a096-4ca790b23b47","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-73f4-xv58-ph22","advisory_id":"d64b8f5b-de3e-47e2-a096-4ca790b23b47","event_types":["advisory"],"published_at":"2026-10-25T23:21:19.791822+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:54+00:00","detail_url":"/advisories/advisory%3Ad64b8f5b-de3e-47e2-a096-4ca790b23b47","group":{"id":"advisory:d64b8f5b-de3e-47e2-a096-4ca790b23b47","revision":1,"primary_event_id":72005,"change":"published","superseded_by":[],"changed":{"id":72005,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-73f4-xv58-ph22","summary":"CGA-73f4-xv58-ph22","evidence":"osv:CGA-73f4-xv58-ph22","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-73f4-xv58-ph22","aliases":["CGA-73f4-xv58-ph22"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-73f4-xv58-ph22.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:07.774342154Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d64b8f5b-de3e-47e2-a096-4ca790b23b47","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-73f4-xv58-ph22","advisory_id":"d64b8f5b-de3e-47e2-a096-4ca790b23b47","event_types":["advisory"],"published_at":"2026-10-25T23:21:19.791822+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:54+00:00","detail_url":"/events/72005"},"members":[{"id":72005,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-73f4-xv58-ph22","summary":"CGA-73f4-xv58-ph22","evidence":"osv:CGA-73f4-xv58-ph22","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-73f4-xv58-ph22","aliases":["CGA-73f4-xv58-ph22"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-73f4-xv58-ph22.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:40:54Z"}]}}],"modified":"2026-10-02T23:01:07.774342154Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d64b8f5b-de3e-47e2-a096-4ca790b23b47","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-73f4-xv58-ph22","advisory_id":"d64b8f5b-de3e-47e2-a096-4ca790b23b47","event_types":["advisory"],"published_at":"2026-10-25T23:21:19.791822+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:52:54+00:00","detail_url":"/events/72005"}]}},{"id":71577,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-6478-fqp8-hfqj","summary":"CGA-6478-fqp8-hfqj","evidence":"osv:CGA-6478-fqp8-hfqj","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6478-fqp8-hfqj","aliases":["CGA-6478-fqp8-hfqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6478-fqp8-hfqj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:06.496848528Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5403da68-308f-42f1-9214-b6e8d7a3f78e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6478-fqp8-hfqj","advisory_id":"5403da68-308f-42f1-9214-b6e8d7a3f78e","event_types":["advisory"],"published_at":"2026-10-25T23:20:35.722487+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:54+00:00","detail_url":"/advisories/advisory%3A5403da68-308f-42f1-9214-b6e8d7a3f78e","group":{"id":"advisory:5403da68-308f-42f1-9214-b6e8d7a3f78e","revision":1,"primary_event_id":71996,"change":"published","superseded_by":[],"changed":{"id":71996,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-6478-fqp8-hfqj","summary":"CGA-6478-fqp8-hfqj","evidence":"osv:CGA-6478-fqp8-hfqj","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6478-fqp8-hfqj","aliases":["CGA-6478-fqp8-hfqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6478-fqp8-hfqj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:06.496848528Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5403da68-308f-42f1-9214-b6e8d7a3f78e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6478-fqp8-hfqj","advisory_id":"5403da68-308f-42f1-9214-b6e8d7a3f78e","event_types":["advisory"],"published_at":"2026-10-25T23:20:35.722487+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:54+00:00","detail_url":"/events/71996"},"members":[{"id":71996,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-6478-fqp8-hfqj","summary":"CGA-6478-fqp8-hfqj","evidence":"osv:CGA-6478-fqp8-hfqj","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6478-fqp8-hfqj","aliases":["CGA-6478-fqp8-hfqj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6478-fqp8-hfqj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-input-azure_event_hubs-1.5.8/vendor/jar-dependencies/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:06.496848528Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5403da68-308f-42f1-9214-b6e8d7a3f78e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6478-fqp8-hfqj","advisory_id":"5403da68-308f-42f1-9214-b6e8d7a3f78e","event_types":["advisory"],"published_at":"2026-10-25T23:20:35.722487+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:54+00:00","detail_url":"/events/71996"}]}},{"id":71557,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v7mm-gj7h-jv26","summary":"CGA-v7mm-gj7h-jv26","evidence":"osv:CGA-v7mm-gj7h-jv26","products":[{"name":{"value":"datahub-gms-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v7mm-gj7h-jv26","aliases":["CGA-v7mm-gj7h-jv26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms-fips","purl":"pkg:apk/chainguard/datahub-gms-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v7mm-gj7h-jv26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:45:45Z"}]}}],"modified":"2026-10-02T23:01:04.911521096Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b8b28207-11f3-4cf4-9a8f-8fff45bd284e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v7mm-gj7h-jv26","advisory_id":"b8b28207-11f3-4cf4-9a8f-8fff45bd284e","event_types":["advisory"],"published_at":"2026-10-25T23:19:09.033956+00:00","technologies":["core-osv","datahub-gms-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:13:18+00:00","detail_url":"/advisories/advisory%3Ab8b28207-11f3-4cf4-9a8f-8fff45bd284e","group":{"id":"advisory:b8b28207-11f3-4cf4-9a8f-8fff45bd284e","revision":1,"primary_event_id":71972,"change":"published","superseded_by":[],"changed":{"id":71972,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v7mm-gj7h-jv26","summary":"CGA-v7mm-gj7h-jv26","evidence":"osv:CGA-v7mm-gj7h-jv26","products":[{"name":{"value":"datahub-gms-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v7mm-gj7h-jv26","aliases":["CGA-v7mm-gj7h-jv26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms-fips","purl":"pkg:apk/chainguard/datahub-gms-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v7mm-gj7h-jv26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:45:45Z"}]}}],"modified":"2026-10-02T23:01:04.911521096Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b8b28207-11f3-4cf4-9a8f-8fff45bd284e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v7mm-gj7h-jv26","advisory_id":"b8b28207-11f3-4cf4-9a8f-8fff45bd284e","event_types":["advisory"],"published_at":"2026-10-25T23:19:09.033956+00:00","technologies":["core-osv","datahub-gms-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:13:18+00:00","detail_url":"/events/71972"},"members":[{"id":71972,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v7mm-gj7h-jv26","summary":"CGA-v7mm-gj7h-jv26","evidence":"osv:CGA-v7mm-gj7h-jv26","products":[{"name":{"value":"datahub-gms-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.7.0.1-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v7mm-gj7h-jv26","aliases":["CGA-v7mm-gj7h-jv26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.1-r1"}]}],"package":{"name":"datahub-gms-fips","purl":"pkg:apk/chainguard/datahub-gms-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v7mm-gj7h-jv26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/datahub/datahub-gms/bin/war.war","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:45:45Z"}]}}],"modified":"2026-10-02T23:01:04.911521096Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b8b28207-11f3-4cf4-9a8f-8fff45bd284e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v7mm-gj7h-jv26","advisory_id":"b8b28207-11f3-4cf4-9a8f-8fff45bd284e","event_types":["advisory"],"published_at":"2026-10-25T23:19:09.033956+00:00","technologies":["core-osv","datahub-gms-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:13:18+00:00","detail_url":"/events/71972"}]}},{"id":71548,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5fj-wff9-wc2h","summary":"CGA-v5fj-wff9-wc2h","evidence":"osv:CGA-v5fj-wff9-wc2h","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5fj-wff9-wc2h","aliases":["CGA-v5fj-wff9-wc2h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5fj-wff9-wc2h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:12Z"}]}}],"modified":"2026-10-02T23:01:04.165214207Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e78ad40a-347a-4120-8eee-b356c9efb97a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5fj-wff9-wc2h","advisory_id":"e78ad40a-347a-4120-8eee-b356c9efb97a","event_types":["advisory"],"published_at":"2026-10-25T23:18:24.154454+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:18+00:00","detail_url":"/advisories/advisory%3Ae78ad40a-347a-4120-8eee-b356c9efb97a","group":{"id":"advisory:e78ad40a-347a-4120-8eee-b356c9efb97a","revision":1,"primary_event_id":71963,"change":"published","superseded_by":[],"changed":{"id":71963,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5fj-wff9-wc2h","summary":"CGA-v5fj-wff9-wc2h","evidence":"osv:CGA-v5fj-wff9-wc2h","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5fj-wff9-wc2h","aliases":["CGA-v5fj-wff9-wc2h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5fj-wff9-wc2h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:12Z"}]}}],"modified":"2026-10-02T23:01:04.165214207Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e78ad40a-347a-4120-8eee-b356c9efb97a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5fj-wff9-wc2h","advisory_id":"e78ad40a-347a-4120-8eee-b356c9efb97a","event_types":["advisory"],"published_at":"2026-10-25T23:18:24.154454+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:18+00:00","detail_url":"/events/71963"},"members":[{"id":71963,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-v5fj-wff9-wc2h","summary":"CGA-v5fj-wff9-wc2h","evidence":"osv:CGA-v5fj-wff9-wc2h","products":[{"name":{"value":"logstash-fips-9.4","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-v5fj-wff9-wc2h","aliases":["CGA-v5fj-wff9-wc2h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.7-r3"}]}],"package":{"name":"logstash-fips-9.4","purl":"pkg:apk/chainguard/logstash-fips-9.4?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v5fj-wff9-wc2h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/share/logstash/logstash-core/lib/jars/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:00:12Z"}]}}],"modified":"2026-10-02T23:01:04.165214207Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e78ad40a-347a-4120-8eee-b356c9efb97a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v5fj-wff9-wc2h","advisory_id":"e78ad40a-347a-4120-8eee-b356c9efb97a","event_types":["advisory"],"published_at":"2026-10-25T23:18:24.154454+00:00","technologies":["core-osv","logstash-fips-9-4"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:09:18+00:00","detail_url":"/events/71963"}]}},{"id":71543,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qqwh-xvcv-3g95","summary":"CGA-qqwh-xvcv-3g95","evidence":"osv:CGA-qqwh-xvcv-3g95","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qqwh-xvcv-3g95","aliases":["CGA-qqwh-xvcv-3g95"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qqwh-xvcv-3g95.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:30:08Z"}]}}],"modified":"2026-10-02T23:01:03.902598896Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d75bae-047c-4f71-bfbe-7fd2126d9096","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qqwh-xvcv-3g95","advisory_id":"65d75bae-047c-4f71-bfbe-7fd2126d9096","event_types":["advisory"],"published_at":"2026-10-25T23:18:05.461088+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:40:08+00:00","detail_url":"/advisories/advisory%3A65d75bae-047c-4f71-bfbe-7fd2126d9096","group":{"id":"advisory:65d75bae-047c-4f71-bfbe-7fd2126d9096","revision":1,"primary_event_id":71958,"change":"published","superseded_by":[],"changed":{"id":71958,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qqwh-xvcv-3g95","summary":"CGA-qqwh-xvcv-3g95","evidence":"osv:CGA-qqwh-xvcv-3g95","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qqwh-xvcv-3g95","aliases":["CGA-qqwh-xvcv-3g95"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qqwh-xvcv-3g95.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:30:08Z"}]}}],"modified":"2026-10-02T23:01:03.902598896Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d75bae-047c-4f71-bfbe-7fd2126d9096","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qqwh-xvcv-3g95","advisory_id":"65d75bae-047c-4f71-bfbe-7fd2126d9096","event_types":["advisory"],"published_at":"2026-10-25T23:18:05.461088+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:40:08+00:00","detail_url":"/events/71958"},"members":[{"id":71958,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qqwh-xvcv-3g95","summary":"CGA-qqwh-xvcv-3g95","evidence":"osv:CGA-qqwh-xvcv-3g95","products":[{"name":{"value":"opensearch-2-observability","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qqwh-xvcv-3g95","aliases":["CGA-qqwh-xvcv-3g95"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-observability","purl":"pkg:apk/chainguard/opensearch-2-observability?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qqwh-xvcv-3g95.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-observability/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:30:08Z"}]}}],"modified":"2026-10-02T23:01:03.902598896Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:65d75bae-047c-4f71-bfbe-7fd2126d9096","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qqwh-xvcv-3g95","advisory_id":"65d75bae-047c-4f71-bfbe-7fd2126d9096","event_types":["advisory"],"published_at":"2026-10-25T23:18:05.461088+00:00","technologies":["core-osv","opensearch-2-observability"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:40:08+00:00","detail_url":"/events/71958"}]}},{"id":71542,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qxpw-8fg5-qhmh","summary":"CGA-qxpw-8fg5-qhmh","evidence":"osv:CGA-qxpw-8fg5-qhmh","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qxpw-8fg5-qhmh","aliases":["CGA-qxpw-8fg5-qhmh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qxpw-8fg5-qhmh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:43Z"}]}}],"modified":"2026-10-02T23:01:03.605425042Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3b42ead9-eec1-4fca-8eec-3949dd03c2f7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qxpw-8fg5-qhmh","advisory_id":"3b42ead9-eec1-4fca-8eec-3949dd03c2f7","event_types":["advisory"],"published_at":"2026-10-25T23:18:04.182624+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:49+00:00","detail_url":"/advisories/advisory%3A3b42ead9-eec1-4fca-8eec-3949dd03c2f7","group":{"id":"advisory:3b42ead9-eec1-4fca-8eec-3949dd03c2f7","revision":1,"primary_event_id":71957,"change":"published","superseded_by":[],"changed":{"id":71957,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qxpw-8fg5-qhmh","summary":"CGA-qxpw-8fg5-qhmh","evidence":"osv:CGA-qxpw-8fg5-qhmh","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qxpw-8fg5-qhmh","aliases":["CGA-qxpw-8fg5-qhmh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qxpw-8fg5-qhmh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:43Z"}]}}],"modified":"2026-10-02T23:01:03.605425042Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3b42ead9-eec1-4fca-8eec-3949dd03c2f7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qxpw-8fg5-qhmh","advisory_id":"3b42ead9-eec1-4fca-8eec-3949dd03c2f7","event_types":["advisory"],"published_at":"2026-10-25T23:18:04.182624+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:49+00:00","detail_url":"/events/71957"},"members":[{"id":71957,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qxpw-8fg5-qhmh","summary":"CGA-qxpw-8fg5-qhmh","evidence":"osv:CGA-qxpw-8fg5-qhmh","products":[{"name":{"value":"logstash-fips-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qxpw-8fg5-qhmh","aliases":["CGA-qxpw-8fg5-qhmh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-fips-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qxpw-8fg5-qhmh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:41:43Z"}]}}],"modified":"2026-10-02T23:01:03.605425042Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3b42ead9-eec1-4fca-8eec-3949dd03c2f7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qxpw-8fg5-qhmh","advisory_id":"3b42ead9-eec1-4fca-8eec-3949dd03c2f7","event_types":["advisory"],"published_at":"2026-10-25T23:18:04.182624+00:00","technologies":["core-osv","logstash-fips-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:24:49+00:00","detail_url":"/events/71957"}]}},{"id":71535,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p65r-29mm-c4m9","summary":"CGA-p65r-29mm-c4m9","evidence":"osv:CGA-p65r-29mm-c4m9","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p65r-29mm-c4m9","aliases":["CGA-p65r-29mm-c4m9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p65r-29mm-c4m9.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:02.862011843Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p65r-29mm-c4m9","advisory_id":"ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","event_types":["advisory"],"published_at":"2026-10-25T23:17:30.996241+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/advisories/advisory%3Aba19cc90-5be0-459c-99e7-dfa1c0b6cb37","group":{"id":"advisory:ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","revision":1,"primary_event_id":71948,"change":"published","superseded_by":[],"changed":{"id":71948,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p65r-29mm-c4m9","summary":"CGA-p65r-29mm-c4m9","evidence":"osv:CGA-p65r-29mm-c4m9","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p65r-29mm-c4m9","aliases":["CGA-p65r-29mm-c4m9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p65r-29mm-c4m9.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:02.862011843Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p65r-29mm-c4m9","advisory_id":"ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","event_types":["advisory"],"published_at":"2026-10-25T23:17:30.996241+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/events/71948"},"members":[{"id":71948,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-p65r-29mm-c4m9","summary":"CGA-p65r-29mm-c4m9","evidence":"osv:CGA-p65r-29mm-c4m9","products":[{"name":{"value":"logstash-9.5-iamguarded-compat","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.5.4-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p65r-29mm-c4m9","aliases":["CGA-p65r-29mm-c4m9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.4-r3"}]}],"package":{"name":"logstash-9.5-iamguarded-compat","purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p65r-29mm-c4m9.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/jrjackson-0.5.2-java/lib/com/fasterxml/jackson/core/jackson-databind/2.21.4/jackson-databind-2.21.4.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T15:46:14Z"}]}}],"modified":"2026-10-02T23:01:02.862011843Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p65r-29mm-c4m9","advisory_id":"ba19cc90-5be0-459c-99e7-dfa1c0b6cb37","event_types":["advisory"],"published_at":"2026-10-25T23:17:30.996241+00:00","technologies":["core-osv","logstash-9-5-iamguarded-compat"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:35:53+00:00","detail_url":"/events/71948"}]}},{"id":71476,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qrfc-f9jq-jc4j","summary":"CGA-qrfc-f9jq-jc4j","evidence":"osv:CGA-qrfc-f9jq-jc4j","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qrfc-f9jq-jc4j","aliases":["CGA-qrfc-f9jq-jc4j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qrfc-f9jq-jc4j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:50:08Z"}]}}],"modified":"2026-10-02T23:00:57.270282202Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d878a69-3322-4883-b82f-781c73b6f4f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qrfc-f9jq-jc4j","advisory_id":"4d878a69-3322-4883-b82f-781c73b6f4f5","event_types":["advisory"],"published_at":"2026-10-25T23:13:14.957165+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:51:20+00:00","detail_url":"/advisories/advisory%3A4d878a69-3322-4883-b82f-781c73b6f4f5","group":{"id":"advisory:4d878a69-3322-4883-b82f-781c73b6f4f5","revision":1,"primary_event_id":71883,"change":"published","superseded_by":[],"changed":{"id":71883,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qrfc-f9jq-jc4j","summary":"CGA-qrfc-f9jq-jc4j","evidence":"osv:CGA-qrfc-f9jq-jc4j","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qrfc-f9jq-jc4j","aliases":["CGA-qrfc-f9jq-jc4j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qrfc-f9jq-jc4j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:50:08Z"}]}}],"modified":"2026-10-02T23:00:57.270282202Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d878a69-3322-4883-b82f-781c73b6f4f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qrfc-f9jq-jc4j","advisory_id":"4d878a69-3322-4883-b82f-781c73b6f4f5","event_types":["advisory"],"published_at":"2026-10-25T23:13:14.957165+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:51:20+00:00","detail_url":"/events/71883"},"members":[{"id":71883,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-qrfc-f9jq-jc4j","summary":"CGA-qrfc-f9jq-jc4j","evidence":"osv:CGA-qrfc-f9jq-jc4j","products":[{"name":{"value":"opensearch-2-reporting","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-qrfc-f9jq-jc4j","aliases":["CGA-qrfc-f9jq-jc4j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-reporting","purl":"pkg:apk/chainguard/opensearch-2-reporting?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qrfc-f9jq-jc4j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-reports-scheduler/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:50:08Z"}]}}],"modified":"2026-10-02T23:00:57.270282202Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:4d878a69-3322-4883-b82f-781c73b6f4f5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qrfc-f9jq-jc4j","advisory_id":"4d878a69-3322-4883-b82f-781c73b6f4f5","event_types":["advisory"],"published_at":"2026-10-25T23:13:14.957165+00:00","technologies":["core-osv","opensearch-2-reporting"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:51:20+00:00","detail_url":"/events/71883"}]}},{"id":71465,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-q4fr-4842-wqh5","summary":"CGA-q4fr-4842-wqh5","evidence":"osv:CGA-q4fr-4842-wqh5","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q4fr-4842-wqh5","aliases":["CGA-q4fr-4842-wqh5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q4fr-4842-wqh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:57Z"}]}}],"modified":"2026-10-02T23:00:55.336070320Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fdcda00-5af1-4f97-8c85-73bc435b85ad","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q4fr-4842-wqh5","advisory_id":"2fdcda00-5af1-4f97-8c85-73bc435b85ad","event_types":["advisory"],"published_at":"2026-10-25T23:12:21.656356+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:50+00:00","detail_url":"/advisories/advisory%3A2fdcda00-5af1-4f97-8c85-73bc435b85ad","group":{"id":"advisory:2fdcda00-5af1-4f97-8c85-73bc435b85ad","revision":1,"primary_event_id":71870,"change":"published","superseded_by":[],"changed":{"id":71870,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-q4fr-4842-wqh5","summary":"CGA-q4fr-4842-wqh5","evidence":"osv:CGA-q4fr-4842-wqh5","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q4fr-4842-wqh5","aliases":["CGA-q4fr-4842-wqh5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q4fr-4842-wqh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:57Z"}]}}],"modified":"2026-10-02T23:00:55.336070320Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fdcda00-5af1-4f97-8c85-73bc435b85ad","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q4fr-4842-wqh5","advisory_id":"2fdcda00-5af1-4f97-8c85-73bc435b85ad","event_types":["advisory"],"published_at":"2026-10-25T23:12:21.656356+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:50+00:00","detail_url":"/events/71870"},"members":[{"id":71870,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-q4fr-4842-wqh5","summary":"CGA-q4fr-4842-wqh5","evidence":"osv:CGA-q4fr-4842-wqh5","products":[{"name":{"value":"opensearch-2-performance-analyzer","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q4fr-4842-wqh5","aliases":["CGA-q4fr-4842-wqh5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2-performance-analyzer","purl":"pkg:apk/chainguard/opensearch-2-performance-analyzer?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q4fr-4842-wqh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/plugins/opensearch-performance-analyzer/performance-analyzer-rca/lib/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:52:57Z"}]}}],"modified":"2026-10-02T23:00:55.336070320Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:2fdcda00-5af1-4f97-8c85-73bc435b85ad","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q4fr-4842-wqh5","advisory_id":"2fdcda00-5af1-4f97-8c85-73bc435b85ad","event_types":["advisory"],"published_at":"2026-10-25T23:12:21.656356+00:00","technologies":["core-osv","opensearch-2-performance-analyzer"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:38:50+00:00","detail_url":"/events/71870"}]}},{"id":71340,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-9qx6-h7gj-w343","summary":"CGA-9qx6-h7gj-w343","evidence":"osv:CGA-9qx6-h7gj-w343","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qx6-h7gj-w343","aliases":["CGA-9qx6-h7gj-w343"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:00:42.814228920Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e06ff85-4caf-4fb7-8bba-761f40d131ff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qx6-h7gj-w343","advisory_id":"3e06ff85-4caf-4fb7-8bba-761f40d131ff","event_types":["advisory"],"published_at":"2026-10-25T23:03:25.370155+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:56+00:00","detail_url":"/advisories/advisory%3A3e06ff85-4caf-4fb7-8bba-761f40d131ff","group":{"id":"advisory:3e06ff85-4caf-4fb7-8bba-761f40d131ff","revision":1,"primary_event_id":71729,"change":"published","superseded_by":[],"changed":{"id":71729,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-9qx6-h7gj-w343","summary":"CGA-9qx6-h7gj-w343","evidence":"osv:CGA-9qx6-h7gj-w343","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qx6-h7gj-w343","aliases":["CGA-9qx6-h7gj-w343"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:00:42.814228920Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e06ff85-4caf-4fb7-8bba-761f40d131ff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qx6-h7gj-w343","advisory_id":"3e06ff85-4caf-4fb7-8bba-761f40d131ff","event_types":["advisory"],"published_at":"2026-10-25T23:03:25.370155+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:56+00:00","detail_url":"/events/71729"},"members":[{"id":71729,"cve_ids":["CVE-2026-19032"],"payload":{"kind":"advisory","title":"CGA-9qx6-h7gj-w343","summary":"CGA-9qx6-h7gj-w343","evidence":"osv:CGA-9qx6-h7gj-w343","products":[{"name":{"value":"opensearch-2","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"opensearch-2","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.19.6-r16","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9qx6-h7gj-w343","aliases":["CGA-9qx6-h7gj-w343"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/chainguard/opensearch-2?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.6-r16"}]}],"package":{"name":"opensearch-2","purl":"pkg:apk/wolfi/opensearch-2?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9qx6-h7gj-w343.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/opensearch/modules/ingest-geoip/jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T16:53:13Z"}]}}],"modified":"2026-10-02T23:00:42.814228920Z","provider":"osv","upstream":["CVE-2026-19032","GHSA-wjgm-6hv5-3cvf"],"references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-19032","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e06ff85-4caf-4fb7-8bba-761f40d131ff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9qx6-h7gj-w343","advisory_id":"3e06ff85-4caf-4fb7-8bba-761f40d131ff","event_types":["advisory"],"published_at":"2026-10-25T23:03:25.370155+00:00","technologies":["core-osv","opensearch-2"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:23:56+00:00","detail_url":"/events/71729"}]}}],"next_after":72022,"next_before":71340}