{"schema_version":"2","view":"grouped","data":[{"id":71912,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-mc46-rf66-f942","summary":"CGA-mc46-rf66-f942","evidence":"osv:CGA-mc46-rf66-f942","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mc46-rf66-f942","aliases":["CGA-mc46-rf66-f942"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:01:37.440851006Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3b5b0672-d390-4330-9074-6624de67dc01","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mc46-rf66-f942","advisory_id":"3b5b0672-d390-4330-9074-6624de67dc01","event_types":["advisory"],"published_at":"2026-10-25T23:54:44.509007+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/advisories/advisory%3A3b5b0672-d390-4330-9074-6624de67dc01","group":{"id":"advisory:3b5b0672-d390-4330-9074-6624de67dc01","revision":1,"primary_event_id":72444,"change":"published","superseded_by":[],"changed":{"id":72444,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-mc46-rf66-f942","summary":"CGA-mc46-rf66-f942","evidence":"osv:CGA-mc46-rf66-f942","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mc46-rf66-f942","aliases":["CGA-mc46-rf66-f942"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:01:37.440851006Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3b5b0672-d390-4330-9074-6624de67dc01","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mc46-rf66-f942","advisory_id":"3b5b0672-d390-4330-9074-6624de67dc01","event_types":["advisory"],"published_at":"2026-10-25T23:54:44.509007+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/events/72444"},"members":[{"id":72444,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-mc46-rf66-f942","summary":"CGA-mc46-rf66-f942","evidence":"osv:CGA-mc46-rf66-f942","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mc46-rf66-f942","aliases":["CGA-mc46-rf66-f942"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mc46-rf66-f942.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:01:37.440851006Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3b5b0672-d390-4330-9074-6624de67dc01","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mc46-rf66-f942","advisory_id":"3b5b0672-d390-4330-9074-6624de67dc01","event_types":["advisory"],"published_at":"2026-10-25T23:54:44.509007+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/events/72444"}]}},{"id":71589,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-877j-378g-32pj","summary":"CGA-877j-378g-32pj","evidence":"osv:CGA-877j-378g-32pj","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-877j-378g-32pj","aliases":["CGA-877j-378g-32pj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}}],"modified":"2026-10-02T23:01:07.837025258Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe2ab29c-19b3-45f6-81cb-cecace3dcbac","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-877j-378g-32pj","advisory_id":"fe2ab29c-19b3-45f6-81cb-cecace3dcbac","event_types":["advisory"],"published_at":"2026-10-25T23:21:28.982246+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/advisories/advisory%3Afe2ab29c-19b3-45f6-81cb-cecace3dcbac","group":{"id":"advisory:fe2ab29c-19b3-45f6-81cb-cecace3dcbac","revision":1,"primary_event_id":72008,"change":"published","superseded_by":[],"changed":{"id":72008,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-877j-378g-32pj","summary":"CGA-877j-378g-32pj","evidence":"osv:CGA-877j-378g-32pj","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-877j-378g-32pj","aliases":["CGA-877j-378g-32pj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}}],"modified":"2026-10-02T23:01:07.837025258Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe2ab29c-19b3-45f6-81cb-cecace3dcbac","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-877j-378g-32pj","advisory_id":"fe2ab29c-19b3-45f6-81cb-cecace3dcbac","event_types":["advisory"],"published_at":"2026-10-25T23:21:28.982246+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/events/72008"},"members":[{"id":72008,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-877j-378g-32pj","summary":"CGA-877j-378g-32pj","evidence":"osv:CGA-877j-378g-32pj","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-877j-378g-32pj","aliases":["CGA-877j-378g-32pj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-877j-378g-32pj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:06Z"}]}}],"modified":"2026-10-02T23:01:07.837025258Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fe2ab29c-19b3-45f6-81cb-cecace3dcbac","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-877j-378g-32pj","advisory_id":"fe2ab29c-19b3-45f6-81cb-cecace3dcbac","event_types":["advisory"],"published_at":"2026-10-25T23:21:28.982246+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/events/72008"}]}},{"id":71127,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-xr7w-xvgm-fj7v","summary":"CGA-xr7w-xvgm-fj7v","evidence":"osv:CGA-xr7w-xvgm-fj7v","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xr7w-xvgm-fj7v","aliases":["CGA-xr7w-xvgm-fj7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}}],"modified":"2026-10-02T23:00:19.444286810Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b9de78d2-5443-4621-95ff-a79fea39adfb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xr7w-xvgm-fj7v","advisory_id":"b9de78d2-5443-4621-95ff-a79fea39adfb","event_types":["advisory"],"published_at":"2026-10-25T22:52:14.923851+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/advisories/advisory%3Ab9de78d2-5443-4621-95ff-a79fea39adfb","group":{"id":"advisory:b9de78d2-5443-4621-95ff-a79fea39adfb","revision":1,"primary_event_id":71502,"change":"published","superseded_by":[],"changed":{"id":71502,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-xr7w-xvgm-fj7v","summary":"CGA-xr7w-xvgm-fj7v","evidence":"osv:CGA-xr7w-xvgm-fj7v","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xr7w-xvgm-fj7v","aliases":["CGA-xr7w-xvgm-fj7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}}],"modified":"2026-10-02T23:00:19.444286810Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b9de78d2-5443-4621-95ff-a79fea39adfb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xr7w-xvgm-fj7v","advisory_id":"b9de78d2-5443-4621-95ff-a79fea39adfb","event_types":["advisory"],"published_at":"2026-10-25T22:52:14.923851+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/events/71502"},"members":[{"id":71502,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-xr7w-xvgm-fj7v","summary":"CGA-xr7w-xvgm-fj7v","evidence":"osv:CGA-xr7w-xvgm-fj7v","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xr7w-xvgm-fj7v","aliases":["CGA-xr7w-xvgm-fj7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xr7w-xvgm-fj7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:27:07Z"}]}}],"modified":"2026-10-02T23:00:19.444286810Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b9de78d2-5443-4621-95ff-a79fea39adfb","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xr7w-xvgm-fj7v","advisory_id":"b9de78d2-5443-4621-95ff-a79fea39adfb","event_types":["advisory"],"published_at":"2026-10-25T22:52:14.923851+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:07:58+00:00","detail_url":"/events/71502"}]}},{"id":71038,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-5hw2-p5x2-r8xp","summary":"CGA-5hw2-p5x2-r8xp","evidence":"osv:CGA-5hw2-p5x2-r8xp","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5hw2-p5x2-r8xp","aliases":["CGA-5hw2-p5x2-r8xp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:00:09.038774997Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bcaeb20-baf9-46cb-ae51-240c89ad94ae","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hw2-p5x2-r8xp","advisory_id":"0bcaeb20-baf9-46cb-ae51-240c89ad94ae","event_types":["advisory"],"published_at":"2026-10-25T22:48:06.442835+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/advisories/advisory%3A0bcaeb20-baf9-46cb-ae51-240c89ad94ae","group":{"id":"advisory:0bcaeb20-baf9-46cb-ae51-240c89ad94ae","revision":1,"primary_event_id":71412,"change":"published","superseded_by":[],"changed":{"id":71412,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-5hw2-p5x2-r8xp","summary":"CGA-5hw2-p5x2-r8xp","evidence":"osv:CGA-5hw2-p5x2-r8xp","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5hw2-p5x2-r8xp","aliases":["CGA-5hw2-p5x2-r8xp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:00:09.038774997Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bcaeb20-baf9-46cb-ae51-240c89ad94ae","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hw2-p5x2-r8xp","advisory_id":"0bcaeb20-baf9-46cb-ae51-240c89ad94ae","event_types":["advisory"],"published_at":"2026-10-25T22:48:06.442835+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/events/71412"},"members":[{"id":71412,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-5hw2-p5x2-r8xp","summary":"CGA-5hw2-p5x2-r8xp","evidence":"osv:CGA-5hw2-p5x2-r8xp","products":[{"name":{"value":"cass-config-builder","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cass-config-builder","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.0.22-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5hw2-p5x2-r8xp","aliases":["CGA-5hw2-p5x2-r8xp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/chainguard/cass-config-builder?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.22-r2"}]}],"package":{"name":"cass-config-builder","purl":"pkg:apk/wolfi/cass-config-builder?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5hw2-p5x2-r8xp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.8","component_type":"java-archive","component_version":"2.18.8","component_location":"/usr/local/bin/cass-config-builder-1.0.22-20260904-all.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:53:06Z"}]}}],"modified":"2026-10-02T23:00:09.038774997Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0bcaeb20-baf9-46cb-ae51-240c89ad94ae","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5hw2-p5x2-r8xp","advisory_id":"0bcaeb20-baf9-46cb-ae51-240c89ad94ae","event_types":["advisory"],"published_at":"2026-10-25T22:48:06.442835+00:00","technologies":["cass-config-builder","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:18:10+00:00","detail_url":"/events/71412"}]}}],"next_after":71912,"next_before":71038}