{"schema_version":"2","view":"grouped","data":[{"id":71532,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-phh3-9vrv-76gh","summary":"CGA-phh3-9vrv-76gh","evidence":"osv:CGA-phh3-9vrv-76gh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-phh3-9vrv-76gh","aliases":["CGA-phh3-9vrv-76gh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:01:02.858887577Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07222168-052e-48e7-9da4-7ac3f7d052de","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-phh3-9vrv-76gh","advisory_id":"07222168-052e-48e7-9da4-7ac3f7d052de","event_types":["advisory"],"published_at":"2026-10-25T23:17:19.481742+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:48+00:00","detail_url":"/advisories/advisory%3A07222168-052e-48e7-9da4-7ac3f7d052de","group":{"id":"advisory:07222168-052e-48e7-9da4-7ac3f7d052de","revision":1,"primary_event_id":71945,"change":"published","superseded_by":[],"changed":{"id":71945,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-phh3-9vrv-76gh","summary":"CGA-phh3-9vrv-76gh","evidence":"osv:CGA-phh3-9vrv-76gh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-phh3-9vrv-76gh","aliases":["CGA-phh3-9vrv-76gh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:01:02.858887577Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07222168-052e-48e7-9da4-7ac3f7d052de","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-phh3-9vrv-76gh","advisory_id":"07222168-052e-48e7-9da4-7ac3f7d052de","event_types":["advisory"],"published_at":"2026-10-25T23:17:19.481742+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:48+00:00","detail_url":"/events/71945"},"members":[{"id":71945,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-phh3-9vrv-76gh","summary":"CGA-phh3-9vrv-76gh","evidence":"osv:CGA-phh3-9vrv-76gh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-phh3-9vrv-76gh","aliases":["CGA-phh3-9vrv-76gh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-phh3-9vrv-76gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:01:02.858887577Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:07222168-052e-48e7-9da4-7ac3f7d052de","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-phh3-9vrv-76gh","advisory_id":"07222168-052e-48e7-9da4-7ac3f7d052de","event_types":["advisory"],"published_at":"2026-10-25T23:17:19.481742+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:48+00:00","detail_url":"/events/71945"}]}},{"id":71076,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-2v48-wm78-6qgg","summary":"CGA-2v48-wm78-6qgg","evidence":"osv:CGA-2v48-wm78-6qgg","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2v48-wm78-6qgg","aliases":["CGA-2v48-wm78-6qgg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}}],"modified":"2026-10-02T23:00:13.486465415Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c22ce13f-a5fc-48f4-8795-a3b2afda74cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2v48-wm78-6qgg","advisory_id":"c22ce13f-a5fc-48f4-8795-a3b2afda74cf","event_types":["advisory"],"published_at":"2026-10-25T22:49:31.158416+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:39+00:00","detail_url":"/advisories/advisory%3Ac22ce13f-a5fc-48f4-8795-a3b2afda74cf","group":{"id":"advisory:c22ce13f-a5fc-48f4-8795-a3b2afda74cf","revision":1,"primary_event_id":71450,"change":"published","superseded_by":[],"changed":{"id":71450,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-2v48-wm78-6qgg","summary":"CGA-2v48-wm78-6qgg","evidence":"osv:CGA-2v48-wm78-6qgg","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2v48-wm78-6qgg","aliases":["CGA-2v48-wm78-6qgg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}}],"modified":"2026-10-02T23:00:13.486465415Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c22ce13f-a5fc-48f4-8795-a3b2afda74cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2v48-wm78-6qgg","advisory_id":"c22ce13f-a5fc-48f4-8795-a3b2afda74cf","event_types":["advisory"],"published_at":"2026-10-25T22:49:31.158416+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:39+00:00","detail_url":"/events/71450"},"members":[{"id":71450,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-2v48-wm78-6qgg","summary":"CGA-2v48-wm78-6qgg","evidence":"osv:CGA-2v48-wm78-6qgg","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2v48-wm78-6qgg","aliases":["CGA-2v48-wm78-6qgg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2v48-wm78-6qgg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:08Z"}]}}],"modified":"2026-10-02T23:00:13.486465415Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c22ce13f-a5fc-48f4-8795-a3b2afda74cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2v48-wm78-6qgg","advisory_id":"c22ce13f-a5fc-48f4-8795-a3b2afda74cf","event_types":["advisory"],"published_at":"2026-10-25T22:49:31.158416+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:39+00:00","detail_url":"/events/71450"}]}},{"id":71062,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-w45v-54qx-gxcc","summary":"CGA-w45v-54qx-gxcc","evidence":"osv:CGA-w45v-54qx-gxcc","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w45v-54qx-gxcc","aliases":["CGA-w45v-54qx-gxcc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:00:11.620030890Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8094e42-a1ab-4309-93ac-e26ffb7a520e","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w45v-54qx-gxcc","advisory_id":"c8094e42-a1ab-4309-93ac-e26ffb7a520e","event_types":["advisory"],"published_at":"2026-10-25T22:49:00.682041+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:49+00:00","detail_url":"/advisories/advisory%3Ac8094e42-a1ab-4309-93ac-e26ffb7a520e","group":{"id":"advisory:c8094e42-a1ab-4309-93ac-e26ffb7a520e","revision":1,"primary_event_id":71436,"change":"published","superseded_by":[],"changed":{"id":71436,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-w45v-54qx-gxcc","summary":"CGA-w45v-54qx-gxcc","evidence":"osv:CGA-w45v-54qx-gxcc","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w45v-54qx-gxcc","aliases":["CGA-w45v-54qx-gxcc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:00:11.620030890Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8094e42-a1ab-4309-93ac-e26ffb7a520e","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w45v-54qx-gxcc","advisory_id":"c8094e42-a1ab-4309-93ac-e26ffb7a520e","event_types":["advisory"],"published_at":"2026-10-25T22:49:00.682041+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:49+00:00","detail_url":"/events/71436"},"members":[{"id":71436,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-w45v-54qx-gxcc","summary":"CGA-w45v-54qx-gxcc","evidence":"osv:CGA-w45v-54qx-gxcc","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w45v-54qx-gxcc","aliases":["CGA-w45v-54qx-gxcc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w45v-54qx-gxcc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:08:07Z"}]}}],"modified":"2026-10-02T23:00:11.620030890Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c8094e42-a1ab-4309-93ac-e26ffb7a520e","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w45v-54qx-gxcc","advisory_id":"c8094e42-a1ab-4309-93ac-e26ffb7a520e","event_types":["advisory"],"published_at":"2026-10-25T22:49:00.682041+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:55:49+00:00","detail_url":"/events/71436"}]}},{"id":71047,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-fcwv-vh82-w83r","summary":"CGA-fcwv-vh82-w83r","evidence":"osv:CGA-fcwv-vh82-w83r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fcwv-vh82-w83r","aliases":["CGA-fcwv-vh82-w83r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}}],"modified":"2026-10-02T23:00:10.068579141Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:76ac6b0e-fc16-403a-8bec-85e96d3862d4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcwv-vh82-w83r","advisory_id":"76ac6b0e-fc16-403a-8bec-85e96d3862d4","event_types":["advisory"],"published_at":"2026-10-25T22:48:23.939498+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:40+00:00","detail_url":"/advisories/advisory%3A76ac6b0e-fc16-403a-8bec-85e96d3862d4","group":{"id":"advisory:76ac6b0e-fc16-403a-8bec-85e96d3862d4","revision":1,"primary_event_id":71421,"change":"published","superseded_by":[],"changed":{"id":71421,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-fcwv-vh82-w83r","summary":"CGA-fcwv-vh82-w83r","evidence":"osv:CGA-fcwv-vh82-w83r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fcwv-vh82-w83r","aliases":["CGA-fcwv-vh82-w83r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}}],"modified":"2026-10-02T23:00:10.068579141Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:76ac6b0e-fc16-403a-8bec-85e96d3862d4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcwv-vh82-w83r","advisory_id":"76ac6b0e-fc16-403a-8bec-85e96d3862d4","event_types":["advisory"],"published_at":"2026-10-25T22:48:23.939498+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:40+00:00","detail_url":"/events/71421"},"members":[{"id":71421,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-fcwv-vh82-w83r","summary":"CGA-fcwv-vh82-w83r","evidence":"osv:CGA-fcwv-vh82-w83r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r5","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fcwv-vh82-w83r","aliases":["CGA-fcwv-vh82-w83r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r5"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fcwv-vh82-w83r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T18:49:07Z"}]}}],"modified":"2026-10-02T23:00:10.068579141Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:76ac6b0e-fc16-403a-8bec-85e96d3862d4","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fcwv-vh82-w83r","advisory_id":"76ac6b0e-fc16-403a-8bec-85e96d3862d4","event_types":["advisory"],"published_at":"2026-10-25T22:48:23.939498+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:16:40+00:00","detail_url":"/events/71421"}]}},{"id":65458,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j7fp-g2cv-fxf5","summary":"CGA-j7fp-g2cv-fxf5","evidence":"osv:CGA-j7fp-g2cv-fxf5","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j7fp-g2cv-fxf5","aliases":["CGA-j7fp-g2cv-fxf5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}}],"modified":"2026-10-01T23:01:56.173409251Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b006f4af-15b7-4c6b-9925-a9e049016c01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fp-g2cv-fxf5","advisory_id":"b006f4af-15b7-4c6b-9925-a9e049016c01","event_types":["advisory"],"published_at":"2026-10-25T20:23:50.659893+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/advisories/advisory%3Ab006f4af-15b7-4c6b-9925-a9e049016c01","group":{"id":"advisory:b006f4af-15b7-4c6b-9925-a9e049016c01","revision":1,"primary_event_id":64776,"change":"published","superseded_by":[],"changed":{"id":64776,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j7fp-g2cv-fxf5","summary":"CGA-j7fp-g2cv-fxf5","evidence":"osv:CGA-j7fp-g2cv-fxf5","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j7fp-g2cv-fxf5","aliases":["CGA-j7fp-g2cv-fxf5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}}],"modified":"2026-10-01T23:01:56.173409251Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b006f4af-15b7-4c6b-9925-a9e049016c01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fp-g2cv-fxf5","advisory_id":"b006f4af-15b7-4c6b-9925-a9e049016c01","event_types":["advisory"],"published_at":"2026-10-25T20:23:50.659893+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/events/64776"},"members":[{"id":64776,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j7fp-g2cv-fxf5","summary":"CGA-j7fp-g2cv-fxf5","evidence":"osv:CGA-j7fp-g2cv-fxf5","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j7fp-g2cv-fxf5","aliases":["CGA-j7fp-g2cv-fxf5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j7fp-g2cv-fxf5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:23Z"}]}}],"modified":"2026-10-01T23:01:56.173409251Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b006f4af-15b7-4c6b-9925-a9e049016c01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j7fp-g2cv-fxf5","advisory_id":"b006f4af-15b7-4c6b-9925-a9e049016c01","event_types":["advisory"],"published_at":"2026-10-25T20:23:50.659893+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/events/64776"}]}},{"id":65376,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8q5x-9f22-jv3r","summary":"CGA-8q5x-9f22-jv3r","evidence":"osv:CGA-8q5x-9f22-jv3r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8q5x-9f22-jv3r","aliases":["CGA-8q5x-9f22-jv3r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}}],"modified":"2026-10-01T23:01:47.339192271Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2a50a868-37e0-4a96-9444-d23805bc5e59","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q5x-9f22-jv3r","advisory_id":"2a50a868-37e0-4a96-9444-d23805bc5e59","event_types":["advisory"],"published_at":"2026-10-25T20:22:46.709637+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:14+00:00","detail_url":"/advisories/advisory%3A2a50a868-37e0-4a96-9444-d23805bc5e59","group":{"id":"advisory:2a50a868-37e0-4a96-9444-d23805bc5e59","revision":1,"primary_event_id":64696,"change":"published","superseded_by":[],"changed":{"id":64696,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8q5x-9f22-jv3r","summary":"CGA-8q5x-9f22-jv3r","evidence":"osv:CGA-8q5x-9f22-jv3r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8q5x-9f22-jv3r","aliases":["CGA-8q5x-9f22-jv3r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}}],"modified":"2026-10-01T23:01:47.339192271Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2a50a868-37e0-4a96-9444-d23805bc5e59","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q5x-9f22-jv3r","advisory_id":"2a50a868-37e0-4a96-9444-d23805bc5e59","event_types":["advisory"],"published_at":"2026-10-25T20:22:46.709637+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:14+00:00","detail_url":"/events/64696"},"members":[{"id":64696,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8q5x-9f22-jv3r","summary":"CGA-8q5x-9f22-jv3r","evidence":"osv:CGA-8q5x-9f22-jv3r","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8q5x-9f22-jv3r","aliases":["CGA-8q5x-9f22-jv3r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8q5x-9f22-jv3r.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:07Z"}]}}],"modified":"2026-10-01T23:01:47.339192271Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2a50a868-37e0-4a96-9444-d23805bc5e59","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8q5x-9f22-jv3r","advisory_id":"2a50a868-37e0-4a96-9444-d23805bc5e59","event_types":["advisory"],"published_at":"2026-10-25T20:22:46.709637+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:14+00:00","detail_url":"/events/64696"}]}},{"id":65010,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c6px-658r-cqjp","summary":"CGA-c6px-658r-cqjp","evidence":"osv:CGA-c6px-658r-cqjp","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c6px-658r-cqjp","aliases":["CGA-c6px-658r-cqjp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}}],"modified":"2026-10-01T23:00:55.150604353Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2f15ac16-8a4d-4bcf-83d2-394fdae5455c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6px-658r-cqjp","advisory_id":"2f15ac16-8a4d-4bcf-83d2-394fdae5455c","event_types":["advisory"],"published_at":"2026-10-25T19:58:50.882344+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/advisories/advisory%3A2f15ac16-8a4d-4bcf-83d2-394fdae5455c","group":{"id":"advisory:2f15ac16-8a4d-4bcf-83d2-394fdae5455c","revision":1,"primary_event_id":64339,"change":"published","superseded_by":[],"changed":{"id":64339,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c6px-658r-cqjp","summary":"CGA-c6px-658r-cqjp","evidence":"osv:CGA-c6px-658r-cqjp","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c6px-658r-cqjp","aliases":["CGA-c6px-658r-cqjp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}}],"modified":"2026-10-01T23:00:55.150604353Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2f15ac16-8a4d-4bcf-83d2-394fdae5455c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6px-658r-cqjp","advisory_id":"2f15ac16-8a4d-4bcf-83d2-394fdae5455c","event_types":["advisory"],"published_at":"2026-10-25T19:58:50.882344+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/events/64339"},"members":[{"id":64339,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c6px-658r-cqjp","summary":"CGA-c6px-658r-cqjp","evidence":"osv:CGA-c6px-658r-cqjp","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c6px-658r-cqjp","aliases":["CGA-c6px-658r-cqjp"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c6px-658r-cqjp.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:39:22Z"}]}}],"modified":"2026-10-01T23:00:55.150604353Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2f15ac16-8a4d-4bcf-83d2-394fdae5455c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c6px-658r-cqjp","advisory_id":"2f15ac16-8a4d-4bcf-83d2-394fdae5455c","event_types":["advisory"],"published_at":"2026-10-25T19:58:50.882344+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T11:44:55+00:00","detail_url":"/events/64339"}]}},{"id":65002,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9v7m-88qr-4mhh","summary":"CGA-9v7m-88qr-4mhh","evidence":"osv:CGA-9v7m-88qr-4mhh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9v7m-88qr-4mhh","aliases":["CGA-9v7m-88qr-4mhh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}}],"modified":"2026-10-01T23:00:54.132320476Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:89fbe687-b80c-4a9f-a766-6b0d9663983a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9v7m-88qr-4mhh","advisory_id":"89fbe687-b80c-4a9f-a766-6b0d9663983a","event_types":["advisory"],"published_at":"2026-10-25T19:58:45.093213+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:15+00:00","detail_url":"/advisories/advisory%3A89fbe687-b80c-4a9f-a766-6b0d9663983a","group":{"id":"advisory:89fbe687-b80c-4a9f-a766-6b0d9663983a","revision":1,"primary_event_id":64331,"change":"published","superseded_by":[],"changed":{"id":64331,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9v7m-88qr-4mhh","summary":"CGA-9v7m-88qr-4mhh","evidence":"osv:CGA-9v7m-88qr-4mhh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9v7m-88qr-4mhh","aliases":["CGA-9v7m-88qr-4mhh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}}],"modified":"2026-10-01T23:00:54.132320476Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:89fbe687-b80c-4a9f-a766-6b0d9663983a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9v7m-88qr-4mhh","advisory_id":"89fbe687-b80c-4a9f-a766-6b0d9663983a","event_types":["advisory"],"published_at":"2026-10-25T19:58:45.093213+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:15+00:00","detail_url":"/events/64331"},"members":[{"id":64331,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9v7m-88qr-4mhh","summary":"CGA-9v7m-88qr-4mhh","evidence":"osv:CGA-9v7m-88qr-4mhh","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.0.1-r4","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9v7m-88qr-4mhh","aliases":["CGA-9v7m-88qr-4mhh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-r4"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9v7m-88qr-4mhh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T19:45:08Z"}]}}],"modified":"2026-10-01T23:00:54.132320476Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:89fbe687-b80c-4a9f-a766-6b0d9663983a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9v7m-88qr-4mhh","advisory_id":"89fbe687-b80c-4a9f-a766-6b0d9663983a","event_types":["advisory"],"published_at":"2026-10-25T19:58:45.093213+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:55:15+00:00","detail_url":"/events/64331"}]}},{"id":29690,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mhhg-837v-7537","summary":"CGA-mhhg-837v-7537","evidence":"osv:CGA-mhhg-837v-7537","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mhhg-837v-7537","aliases":["CGA-mhhg-837v-7537"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:51.205375691Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mhhg-837v-7537","advisory_id":"eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","event_types":["advisory"],"published_at":"2026-10-25T07:59:40.359774+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/advisories/advisory%3Aeee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","group":{"id":"advisory:eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","revision":1,"primary_event_id":29453,"change":"published","superseded_by":[],"changed":{"id":29453,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mhhg-837v-7537","summary":"CGA-mhhg-837v-7537","evidence":"osv:CGA-mhhg-837v-7537","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mhhg-837v-7537","aliases":["CGA-mhhg-837v-7537"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:51.205375691Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mhhg-837v-7537","advisory_id":"eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","event_types":["advisory"],"published_at":"2026-10-25T07:59:40.359774+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/29453"},"members":[{"id":29453,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mhhg-837v-7537","summary":"CGA-mhhg-837v-7537","evidence":"osv:CGA-mhhg-837v-7537","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mhhg-837v-7537","aliases":["CGA-mhhg-837v-7537"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mhhg-837v-7537.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:51.205375691Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mhhg-837v-7537","advisory_id":"eee22ebf-c4ee-4c19-86d8-eaf50d8a1be5","event_types":["advisory"],"published_at":"2026-10-25T07:59:40.359774+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/29453"}]}},{"id":28311,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9c8p-8c6x-w28p","summary":"CGA-9c8p-8c6x-w28p","evidence":"osv:CGA-9c8p-8c6x-w28p","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9c8p-8c6x-w28p","aliases":["CGA-9c8p-8c6x-w28p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:08.607799053Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9c8p-8c6x-w28p","advisory_id":"57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","event_types":["advisory"],"published_at":"2026-10-25T07:36:11.047706+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/advisories/advisory%3A57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","group":{"id":"advisory:57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","revision":1,"primary_event_id":28096,"change":"published","superseded_by":[],"changed":{"id":28096,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9c8p-8c6x-w28p","summary":"CGA-9c8p-8c6x-w28p","evidence":"osv:CGA-9c8p-8c6x-w28p","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9c8p-8c6x-w28p","aliases":["CGA-9c8p-8c6x-w28p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:08.607799053Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9c8p-8c6x-w28p","advisory_id":"57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","event_types":["advisory"],"published_at":"2026-10-25T07:36:11.047706+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/28096"},"members":[{"id":28096,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-9c8p-8c6x-w28p","summary":"CGA-9c8p-8c6x-w28p","evidence":"osv:CGA-9c8p-8c6x-w28p","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-9c8p-8c6x-w28p","aliases":["CGA-9c8p-8c6x-w28p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9c8p-8c6x-w28p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:47:08.607799053Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9c8p-8c6x-w28p","advisory_id":"57e8d2f3-f2e5-48d2-90ee-dce5c17a0e9a","event_types":["advisory"],"published_at":"2026-10-25T07:36:11.047706+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/28096"}]}},{"id":28291,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-67wr-ghgf-w2gr","summary":"CGA-67wr-ghgf-w2gr","evidence":"osv:CGA-67wr-ghgf-w2gr","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-67wr-ghgf-w2gr","aliases":["CGA-67wr-ghgf-w2gr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:46:57.817254424Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30a0765-1ed5-48e1-b8ae-225d94347ef2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-67wr-ghgf-w2gr","advisory_id":"a30a0765-1ed5-48e1-b8ae-225d94347ef2","event_types":["advisory"],"published_at":"2026-10-25T07:35:58.786747+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/advisories/advisory%3Aa30a0765-1ed5-48e1-b8ae-225d94347ef2","group":{"id":"advisory:a30a0765-1ed5-48e1-b8ae-225d94347ef2","revision":1,"primary_event_id":28076,"change":"published","superseded_by":[],"changed":{"id":28076,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-67wr-ghgf-w2gr","summary":"CGA-67wr-ghgf-w2gr","evidence":"osv:CGA-67wr-ghgf-w2gr","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-67wr-ghgf-w2gr","aliases":["CGA-67wr-ghgf-w2gr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:46:57.817254424Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30a0765-1ed5-48e1-b8ae-225d94347ef2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-67wr-ghgf-w2gr","advisory_id":"a30a0765-1ed5-48e1-b8ae-225d94347ef2","event_types":["advisory"],"published_at":"2026-10-25T07:35:58.786747+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/28076"},"members":[{"id":28076,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-67wr-ghgf-w2gr","summary":"CGA-67wr-ghgf-w2gr","evidence":"osv:CGA-67wr-ghgf-w2gr","products":[{"name":{"value":"cassandra-reaper","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"cassandra-reaper","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-67wr-ghgf-w2gr","aliases":["CGA-67wr-ghgf-w2gr"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/chainguard/cassandra-reaper?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"cassandra-reaper","purl":"pkg:apk/wolfi/cassandra-reaper?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-67wr-ghgf-w2gr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/usr/local/lib/cassandra-reaper.jar","latest_event_status":"detection","latest_event_timestamp":"2026-09-29T11:45:52Z"}]}}],"modified":"2026-09-29T16:46:57.817254424Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a30a0765-1ed5-48e1-b8ae-225d94347ef2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-67wr-ghgf-w2gr","advisory_id":"a30a0765-1ed5-48e1-b8ae-225d94347ef2","event_types":["advisory"],"published_at":"2026-10-25T07:35:58.786747+00:00","technologies":["cassandra-reaper","core-osv"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:45:52+00:00","detail_url":"/events/28076"}]}}],"next_after":71532,"next_before":28291}