{"schema_version":"2","view":"grouped","data":[{"id":72028,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-wp8m-33w8-vm7v","summary":"CGA-wp8m-33w8-vm7v","evidence":"osv:CGA-wp8m-33w8-vm7v","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wp8m-33w8-vm7v","aliases":["CGA-wp8m-33w8-vm7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}}],"modified":"2026-10-02T23:01:51.828920638Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wp8m-33w8-vm7v","advisory_id":"aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","event_types":["advisory"],"published_at":"2026-10-26T00:11:13.282233+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/advisories/advisory%3Aaadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","group":{"id":"advisory:aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","revision":1,"primary_event_id":72645,"change":"published","superseded_by":[],"changed":{"id":72645,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-wp8m-33w8-vm7v","summary":"CGA-wp8m-33w8-vm7v","evidence":"osv:CGA-wp8m-33w8-vm7v","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wp8m-33w8-vm7v","aliases":["CGA-wp8m-33w8-vm7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}}],"modified":"2026-10-02T23:01:51.828920638Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wp8m-33w8-vm7v","advisory_id":"aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","event_types":["advisory"],"published_at":"2026-10-26T00:11:13.282233+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/events/72645"},"members":[{"id":72645,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-wp8m-33w8-vm7v","summary":"CGA-wp8m-33w8-vm7v","evidence":"osv:CGA-wp8m-33w8-vm7v","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wp8m-33w8-vm7v","aliases":["CGA-wp8m-33w8-vm7v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wp8m-33w8-vm7v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:07Z"}]}}],"modified":"2026-10-02T23:01:51.828920638Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wp8m-33w8-vm7v","advisory_id":"aadc0795-8fc4-40d0-b092-9d0d8fa3a0a9","event_types":["advisory"],"published_at":"2026-10-26T00:11:13.282233+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/events/72645"}]}},{"id":72011,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-w862-vxcv-ffw7","summary":"CGA-w862-vxcv-ffw7","evidence":"osv:CGA-w862-vxcv-ffw7","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w862-vxcv-ffw7","aliases":["CGA-w862-vxcv-ffw7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}}],"modified":"2026-10-02T23:01:50.171200103Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w862-vxcv-ffw7","advisory_id":"d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","event_types":["advisory"],"published_at":"2026-10-26T00:08:09.352428+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/advisories/advisory%3Ad11c39ca-2fe1-4980-9a3e-b93e0624e5dc","group":{"id":"advisory:d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","revision":1,"primary_event_id":72600,"change":"published","superseded_by":[],"changed":{"id":72600,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-w862-vxcv-ffw7","summary":"CGA-w862-vxcv-ffw7","evidence":"osv:CGA-w862-vxcv-ffw7","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w862-vxcv-ffw7","aliases":["CGA-w862-vxcv-ffw7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}}],"modified":"2026-10-02T23:01:50.171200103Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w862-vxcv-ffw7","advisory_id":"d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","event_types":["advisory"],"published_at":"2026-10-26T00:08:09.352428+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/events/72600"},"members":[{"id":72600,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-w862-vxcv-ffw7","summary":"CGA-w862-vxcv-ffw7","evidence":"osv:CGA-w862-vxcv-ffw7","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-w862-vxcv-ffw7","aliases":["CGA-w862-vxcv-ffw7"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-w862-vxcv-ffw7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:47:06Z"}]}}],"modified":"2026-10-02T23:01:50.171200103Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-w862-vxcv-ffw7","advisory_id":"d11c39ca-2fe1-4980-9a3e-b93e0624e5dc","event_types":["advisory"],"published_at":"2026-10-26T00:08:09.352428+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:29:07+00:00","detail_url":"/events/72600"}]}},{"id":71678,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7723-qjqr-8jwg","summary":"CGA-7723-qjqr-8jwg","evidence":"osv:CGA-7723-qjqr-8jwg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7723-qjqr-8jwg","aliases":["CGA-7723-qjqr-8jwg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}}],"modified":"2026-10-02T23:01:17.091778238Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf12eab8-3922-4ca8-8759-eeb0684bdbf1","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7723-qjqr-8jwg","advisory_id":"cf12eab8-3922-4ca8-8759-eeb0684bdbf1","event_types":["advisory"],"published_at":"2026-10-25T23:28:24.364247+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:40+00:00","detail_url":"/advisories/advisory%3Acf12eab8-3922-4ca8-8759-eeb0684bdbf1","group":{"id":"advisory:cf12eab8-3922-4ca8-8759-eeb0684bdbf1","revision":1,"primary_event_id":72116,"change":"published","superseded_by":[],"changed":{"id":72116,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7723-qjqr-8jwg","summary":"CGA-7723-qjqr-8jwg","evidence":"osv:CGA-7723-qjqr-8jwg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7723-qjqr-8jwg","aliases":["CGA-7723-qjqr-8jwg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}}],"modified":"2026-10-02T23:01:17.091778238Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf12eab8-3922-4ca8-8759-eeb0684bdbf1","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7723-qjqr-8jwg","advisory_id":"cf12eab8-3922-4ca8-8759-eeb0684bdbf1","event_types":["advisory"],"published_at":"2026-10-25T23:28:24.364247+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:40+00:00","detail_url":"/events/72116"},"members":[{"id":72116,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7723-qjqr-8jwg","summary":"CGA-7723-qjqr-8jwg","evidence":"osv:CGA-7723-qjqr-8jwg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7723-qjqr-8jwg","aliases":["CGA-7723-qjqr-8jwg"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7723-qjqr-8jwg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:06Z"}]}}],"modified":"2026-10-02T23:01:17.091778238Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf12eab8-3922-4ca8-8759-eeb0684bdbf1","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7723-qjqr-8jwg","advisory_id":"cf12eab8-3922-4ca8-8759-eeb0684bdbf1","event_types":["advisory"],"published_at":"2026-10-25T23:28:24.364247+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:40+00:00","detail_url":"/events/72116"}]}},{"id":71007,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-3974-v8rg-wqhf","summary":"CGA-3974-v8rg-wqhf","evidence":"osv:CGA-3974-v8rg-wqhf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3974-v8rg-wqhf","aliases":["CGA-3974-v8rg-wqhf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}}],"modified":"2026-10-02T23:00:05.561003019Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59254afb-cb8a-4505-a0cc-6dd1082a353f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3974-v8rg-wqhf","advisory_id":"59254afb-cb8a-4505-a0cc-6dd1082a353f","event_types":["advisory"],"published_at":"2026-10-25T22:46:38.656057+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:39+00:00","detail_url":"/advisories/advisory%3A59254afb-cb8a-4505-a0cc-6dd1082a353f","group":{"id":"advisory:59254afb-cb8a-4505-a0cc-6dd1082a353f","revision":1,"primary_event_id":71381,"change":"published","superseded_by":[],"changed":{"id":71381,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-3974-v8rg-wqhf","summary":"CGA-3974-v8rg-wqhf","evidence":"osv:CGA-3974-v8rg-wqhf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3974-v8rg-wqhf","aliases":["CGA-3974-v8rg-wqhf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}}],"modified":"2026-10-02T23:00:05.561003019Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59254afb-cb8a-4505-a0cc-6dd1082a353f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3974-v8rg-wqhf","advisory_id":"59254afb-cb8a-4505-a0cc-6dd1082a353f","event_types":["advisory"],"published_at":"2026-10-25T22:46:38.656057+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:39+00:00","detail_url":"/events/71381"},"members":[{"id":71381,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-3974-v8rg-wqhf","summary":"CGA-3974-v8rg-wqhf","evidence":"osv:CGA-3974-v8rg-wqhf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r3","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3974-v8rg-wqhf","aliases":["CGA-3974-v8rg-wqhf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r3"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3974-v8rg-wqhf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.22.0","component_type":"java-archive","component_version":"2.22.0","component_location":"/usr/share/java/gradle/lib/jackson-core-2.22.0.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T17:27:07Z"}]}}],"modified":"2026-10-02T23:00:05.561003019Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:59254afb-cb8a-4505-a0cc-6dd1082a353f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3974-v8rg-wqhf","advisory_id":"59254afb-cb8a-4505-a0cc-6dd1082a353f","event_types":["advisory"],"published_at":"2026-10-25T22:46:38.656057+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T14:06:39+00:00","detail_url":"/events/71381"}]}},{"id":70143,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-58c6-hpxq-p4w4","summary":"CGA-58c6-hpxq-p4w4","evidence":"osv:CGA-58c6-hpxq-p4w4","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-58c6-hpxq-p4w4","aliases":["CGA-58c6-hpxq-p4w4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}}],"modified":"2026-10-02T18:25:14.735023660Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d20aa123-1b8e-4c0f-8979-b74289446b79","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-58c6-hpxq-p4w4","advisory_id":"d20aa123-1b8e-4c0f-8979-b74289446b79","event_types":["advisory"],"published_at":"2026-10-25T22:15:32.195349+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/advisories/advisory%3Ad20aa123-1b8e-4c0f-8979-b74289446b79","group":{"id":"advisory:d20aa123-1b8e-4c0f-8979-b74289446b79","revision":1,"primary_event_id":70513,"change":"published","superseded_by":[],"changed":{"id":70513,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-58c6-hpxq-p4w4","summary":"CGA-58c6-hpxq-p4w4","evidence":"osv:CGA-58c6-hpxq-p4w4","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-58c6-hpxq-p4w4","aliases":["CGA-58c6-hpxq-p4w4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}}],"modified":"2026-10-02T18:25:14.735023660Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d20aa123-1b8e-4c0f-8979-b74289446b79","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-58c6-hpxq-p4w4","advisory_id":"d20aa123-1b8e-4c0f-8979-b74289446b79","event_types":["advisory"],"published_at":"2026-10-25T22:15:32.195349+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/events/70513"},"members":[{"id":70513,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-58c6-hpxq-p4w4","summary":"CGA-58c6-hpxq-p4w4","evidence":"osv:CGA-58c6-hpxq-p4w4","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-58c6-hpxq-p4w4","aliases":["CGA-58c6-hpxq-p4w4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-58c6-hpxq-p4w4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:45Z"}]}}],"modified":"2026-10-02T18:25:14.735023660Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d20aa123-1b8e-4c0f-8979-b74289446b79","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-58c6-hpxq-p4w4","advisory_id":"d20aa123-1b8e-4c0f-8979-b74289446b79","event_types":["advisory"],"published_at":"2026-10-25T22:15:32.195349+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/events/70513"}]}},{"id":66307,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mpjc-m2qq-j8cg","summary":"CGA-mpjc-m2qq-j8cg","evidence":"osv:CGA-mpjc-m2qq-j8cg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mpjc-m2qq-j8cg","aliases":["CGA-mpjc-m2qq-j8cg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:17:24.818328948Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf34ecb1-e95d-4357-868a-7dcb9003f242","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mpjc-m2qq-j8cg","advisory_id":"cf34ecb1-e95d-4357-868a-7dcb9003f242","event_types":["advisory"],"published_at":"2026-10-25T20:58:23.271101+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/advisories/advisory%3Acf34ecb1-e95d-4357-868a-7dcb9003f242","group":{"id":"advisory:cf34ecb1-e95d-4357-868a-7dcb9003f242","revision":1,"primary_event_id":66677,"change":"published","superseded_by":[],"changed":{"id":66677,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mpjc-m2qq-j8cg","summary":"CGA-mpjc-m2qq-j8cg","evidence":"osv:CGA-mpjc-m2qq-j8cg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mpjc-m2qq-j8cg","aliases":["CGA-mpjc-m2qq-j8cg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:17:24.818328948Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf34ecb1-e95d-4357-868a-7dcb9003f242","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mpjc-m2qq-j8cg","advisory_id":"cf34ecb1-e95d-4357-868a-7dcb9003f242","event_types":["advisory"],"published_at":"2026-10-25T20:58:23.271101+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/events/66677"},"members":[{"id":66677,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mpjc-m2qq-j8cg","summary":"CGA-mpjc-m2qq-j8cg","evidence":"osv:CGA-mpjc-m2qq-j8cg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mpjc-m2qq-j8cg","aliases":["CGA-mpjc-m2qq-j8cg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mpjc-m2qq-j8cg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:17:24.818328948Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cf34ecb1-e95d-4357-868a-7dcb9003f242","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mpjc-m2qq-j8cg","advisory_id":"cf34ecb1-e95d-4357-868a-7dcb9003f242","event_types":["advisory"],"published_at":"2026-10-25T20:58:23.271101+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/events/66677"}]}},{"id":66129,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-558r-2ccp-9mjh","summary":"CGA-558r-2ccp-9mjh","evidence":"osv:CGA-558r-2ccp-9mjh","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-558r-2ccp-9mjh","aliases":["CGA-558r-2ccp-9mjh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}}],"modified":"2026-10-02T05:17:06.306129238Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5a89cb8-0853-4b8f-9cda-163716b6e0b3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-558r-2ccp-9mjh","advisory_id":"b5a89cb8-0853-4b8f-9cda-163716b6e0b3","event_types":["advisory"],"published_at":"2026-10-25T20:56:13.644435+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/advisories/advisory%3Ab5a89cb8-0853-4b8f-9cda-163716b6e0b3","group":{"id":"advisory:b5a89cb8-0853-4b8f-9cda-163716b6e0b3","revision":1,"primary_event_id":66499,"change":"published","superseded_by":[],"changed":{"id":66499,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-558r-2ccp-9mjh","summary":"CGA-558r-2ccp-9mjh","evidence":"osv:CGA-558r-2ccp-9mjh","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-558r-2ccp-9mjh","aliases":["CGA-558r-2ccp-9mjh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}}],"modified":"2026-10-02T05:17:06.306129238Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5a89cb8-0853-4b8f-9cda-163716b6e0b3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-558r-2ccp-9mjh","advisory_id":"b5a89cb8-0853-4b8f-9cda-163716b6e0b3","event_types":["advisory"],"published_at":"2026-10-25T20:56:13.644435+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/events/66499"},"members":[{"id":66499,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-558r-2ccp-9mjh","summary":"CGA-558r-2ccp-9mjh","evidence":"osv:CGA-558r-2ccp-9mjh","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-558r-2ccp-9mjh","aliases":["CGA-558r-2ccp-9mjh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-558r-2ccp-9mjh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T03:05:46Z"}]}}],"modified":"2026-10-02T05:17:06.306129238Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b5a89cb8-0853-4b8f-9cda-163716b6e0b3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-558r-2ccp-9mjh","advisory_id":"b5a89cb8-0853-4b8f-9cda-163716b6e0b3","event_types":["advisory"],"published_at":"2026-10-25T20:56:13.644435+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:33:21+00:00","detail_url":"/events/66499"}]}},{"id":51069,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-qg29-xq6w-8qqg","summary":"CGA-qg29-xq6w-8qqg","evidence":"osv:CGA-qg29-xq6w-8qqg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-qg29-xq6w-8qqg","aliases":["CGA-qg29-xq6w-8qqg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}}],"modified":"2026-09-30T18:25:34.755864326Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:557dc1df-ec20-4f09-9caa-d69662e905c3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qg29-xq6w-8qqg","advisory_id":"557dc1df-ec20-4f09-9caa-d69662e905c3","event_types":["advisory"],"published_at":"2026-10-25T14:09:55.952706+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/advisories/advisory%3A557dc1df-ec20-4f09-9caa-d69662e905c3","group":{"id":"advisory:557dc1df-ec20-4f09-9caa-d69662e905c3","revision":1,"primary_event_id":50597,"change":"published","superseded_by":[],"changed":{"id":50597,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-qg29-xq6w-8qqg","summary":"CGA-qg29-xq6w-8qqg","evidence":"osv:CGA-qg29-xq6w-8qqg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-qg29-xq6w-8qqg","aliases":["CGA-qg29-xq6w-8qqg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}}],"modified":"2026-09-30T18:25:34.755864326Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:557dc1df-ec20-4f09-9caa-d69662e905c3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qg29-xq6w-8qqg","advisory_id":"557dc1df-ec20-4f09-9caa-d69662e905c3","event_types":["advisory"],"published_at":"2026-10-25T14:09:55.952706+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/events/50597"},"members":[{"id":50597,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-qg29-xq6w-8qqg","summary":"CGA-qg29-xq6w-8qqg","evidence":"osv:CGA-qg29-xq6w-8qqg","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-qg29-xq6w-8qqg","aliases":["CGA-qg29-xq6w-8qqg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-qg29-xq6w-8qqg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:10Z"}]}}],"modified":"2026-09-30T18:25:34.755864326Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:557dc1df-ec20-4f09-9caa-d69662e905c3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-qg29-xq6w-8qqg","advisory_id":"557dc1df-ec20-4f09-9caa-d69662e905c3","event_types":["advisory"],"published_at":"2026-10-25T14:09:55.952706+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/events/50597"}]}},{"id":46000,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xp77-vpmf-jcwv","summary":"CGA-xp77-vpmf-jcwv","evidence":"osv:CGA-xp77-vpmf-jcwv","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xp77-vpmf-jcwv","aliases":["CGA-xp77-vpmf-jcwv"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T17:02:14.986650658Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c8c6874-eb92-40ad-bf08-83b7c8241831","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp77-vpmf-jcwv","advisory_id":"7c8c6874-eb92-40ad-bf08-83b7c8241831","event_types":["advisory"],"published_at":"2026-10-25T12:35:01.668768+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:20+00:00","detail_url":"/advisories/advisory%3A7c8c6874-eb92-40ad-bf08-83b7c8241831","group":{"id":"advisory:7c8c6874-eb92-40ad-bf08-83b7c8241831","revision":1,"primary_event_id":45557,"change":"published","superseded_by":[],"changed":{"id":45557,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xp77-vpmf-jcwv","summary":"CGA-xp77-vpmf-jcwv","evidence":"osv:CGA-xp77-vpmf-jcwv","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xp77-vpmf-jcwv","aliases":["CGA-xp77-vpmf-jcwv"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T17:02:14.986650658Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c8c6874-eb92-40ad-bf08-83b7c8241831","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp77-vpmf-jcwv","advisory_id":"7c8c6874-eb92-40ad-bf08-83b7c8241831","event_types":["advisory"],"published_at":"2026-10-25T12:35:01.668768+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:20+00:00","detail_url":"/events/45557"},"members":[{"id":45557,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xp77-vpmf-jcwv","summary":"CGA-xp77-vpmf-jcwv","evidence":"osv:CGA-xp77-vpmf-jcwv","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xp77-vpmf-jcwv","aliases":["CGA-xp77-vpmf-jcwv"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xp77-vpmf-jcwv.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T17:02:14.986650658Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7c8c6874-eb92-40ad-bf08-83b7c8241831","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xp77-vpmf-jcwv","advisory_id":"7c8c6874-eb92-40ad-bf08-83b7c8241831","event_types":["advisory"],"published_at":"2026-10-25T12:35:01.668768+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:20+00:00","detail_url":"/events/45557"}]}},{"id":37220,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xq69-qh65-vvcj","summary":"CGA-xq69-qh65-vvcj","evidence":"osv:CGA-xq69-qh65-vvcj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xq69-qh65-vvcj","aliases":["CGA-xq69-qh65-vvcj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}}],"modified":"2026-09-30T04:32:26.807898580Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4ec106d5-96e7-44a4-afc8-494869e9c005","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq69-qh65-vvcj","advisory_id":"4ec106d5-96e7-44a4-afc8-494869e9c005","event_types":["advisory"],"published_at":"2026-10-25T10:02:57.040024+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/advisories/advisory%3A4ec106d5-96e7-44a4-afc8-494869e9c005","group":{"id":"advisory:4ec106d5-96e7-44a4-afc8-494869e9c005","revision":1,"primary_event_id":36892,"change":"published","superseded_by":[],"changed":{"id":36892,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xq69-qh65-vvcj","summary":"CGA-xq69-qh65-vvcj","evidence":"osv:CGA-xq69-qh65-vvcj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xq69-qh65-vvcj","aliases":["CGA-xq69-qh65-vvcj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}}],"modified":"2026-09-30T04:32:26.807898580Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4ec106d5-96e7-44a4-afc8-494869e9c005","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq69-qh65-vvcj","advisory_id":"4ec106d5-96e7-44a4-afc8-494869e9c005","event_types":["advisory"],"published_at":"2026-10-25T10:02:57.040024+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/36892"},"members":[{"id":36892,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xq69-qh65-vvcj","summary":"CGA-xq69-qh65-vvcj","evidence":"osv:CGA-xq69-qh65-vvcj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xq69-qh65-vvcj","aliases":["CGA-xq69-qh65-vvcj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xq69-qh65-vvcj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:49Z"}]}}],"modified":"2026-09-30T04:32:26.807898580Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4ec106d5-96e7-44a4-afc8-494869e9c005","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xq69-qh65-vvcj","advisory_id":"4ec106d5-96e7-44a4-afc8-494869e9c005","event_types":["advisory"],"published_at":"2026-10-25T10:02:57.040024+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/36892"}]}},{"id":36423,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v556-26fr-x7wq","summary":"CGA-v556-26fr-x7wq","evidence":"osv:CGA-v556-26fr-x7wq","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v556-26fr-x7wq","aliases":["CGA-v556-26fr-x7wq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:32:22.204281864Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ab484f28-9289-4d0c-bf4e-7e3f45824405","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v556-26fr-x7wq","advisory_id":"ab484f28-9289-4d0c-bf4e-7e3f45824405","event_types":["advisory"],"published_at":"2026-10-25T09:49:54.265388+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/advisories/advisory%3Aab484f28-9289-4d0c-bf4e-7e3f45824405","group":{"id":"advisory:ab484f28-9289-4d0c-bf4e-7e3f45824405","revision":1,"primary_event_id":36105,"change":"published","superseded_by":[],"changed":{"id":36105,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v556-26fr-x7wq","summary":"CGA-v556-26fr-x7wq","evidence":"osv:CGA-v556-26fr-x7wq","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v556-26fr-x7wq","aliases":["CGA-v556-26fr-x7wq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:32:22.204281864Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ab484f28-9289-4d0c-bf4e-7e3f45824405","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v556-26fr-x7wq","advisory_id":"ab484f28-9289-4d0c-bf4e-7e3f45824405","event_types":["advisory"],"published_at":"2026-10-25T09:49:54.265388+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/36105"},"members":[{"id":36105,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-v556-26fr-x7wq","summary":"CGA-v556-26fr-x7wq","evidence":"osv:CGA-v556-26fr-x7wq","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-v556-26fr-x7wq","aliases":["CGA-v556-26fr-x7wq"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-v556-26fr-x7wq.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:32:22.204281864Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ab484f28-9289-4d0c-bf4e-7e3f45824405","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-v556-26fr-x7wq","advisory_id":"ab484f28-9289-4d0c-bf4e-7e3f45824405","event_types":["advisory"],"published_at":"2026-10-25T09:49:54.265388+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/36105"}]}},{"id":36187,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-pgw6-wh29-753w","summary":"CGA-pgw6-wh29-753w","evidence":"osv:CGA-pgw6-wh29-753w","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-pgw6-wh29-753w","aliases":["CGA-pgw6-wh29-753w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T04:32:18.273975846Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bbc6c638-ae50-4675-9231-d7d8c39254fb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pgw6-wh29-753w","advisory_id":"bbc6c638-ae50-4675-9231-d7d8c39254fb","event_types":["advisory"],"published_at":"2026-10-25T09:46:26.288944+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/advisories/advisory%3Abbc6c638-ae50-4675-9231-d7d8c39254fb","group":{"id":"advisory:bbc6c638-ae50-4675-9231-d7d8c39254fb","revision":1,"primary_event_id":35873,"change":"published","superseded_by":[],"changed":{"id":35873,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-pgw6-wh29-753w","summary":"CGA-pgw6-wh29-753w","evidence":"osv:CGA-pgw6-wh29-753w","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-pgw6-wh29-753w","aliases":["CGA-pgw6-wh29-753w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T04:32:18.273975846Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bbc6c638-ae50-4675-9231-d7d8c39254fb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pgw6-wh29-753w","advisory_id":"bbc6c638-ae50-4675-9231-d7d8c39254fb","event_types":["advisory"],"published_at":"2026-10-25T09:46:26.288944+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/events/35873"},"members":[{"id":35873,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-pgw6-wh29-753w","summary":"CGA-pgw6-wh29-753w","evidence":"osv:CGA-pgw6-wh29-753w","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-pgw6-wh29-753w","aliases":["CGA-pgw6-wh29-753w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pgw6-wh29-753w.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T02:44:11Z"}]}}],"modified":"2026-09-30T04:32:18.273975846Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bbc6c638-ae50-4675-9231-d7d8c39254fb","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pgw6-wh29-753w","advisory_id":"bbc6c638-ae50-4675-9231-d7d8c39254fb","event_types":["advisory"],"published_at":"2026-10-25T09:46:26.288944+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T11:50:19+00:00","detail_url":"/events/35873"}]}},{"id":34434,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8pr8-hf3g-4qvf","summary":"CGA-8pr8-hf3g-4qvf","evidence":"osv:CGA-8pr8-hf3g-4qvf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8pr8-hf3g-4qvf","aliases":["CGA-8pr8-hf3g-4qvf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:31:13.800831347Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:698487ed-8e77-459d-9b44-ac3ba0217665","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8pr8-hf3g-4qvf","advisory_id":"698487ed-8e77-459d-9b44-ac3ba0217665","event_types":["advisory"],"published_at":"2026-10-25T09:17:53.885517+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/advisories/advisory%3A698487ed-8e77-459d-9b44-ac3ba0217665","group":{"id":"advisory:698487ed-8e77-459d-9b44-ac3ba0217665","revision":1,"primary_event_id":34145,"change":"published","superseded_by":[],"changed":{"id":34145,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8pr8-hf3g-4qvf","summary":"CGA-8pr8-hf3g-4qvf","evidence":"osv:CGA-8pr8-hf3g-4qvf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8pr8-hf3g-4qvf","aliases":["CGA-8pr8-hf3g-4qvf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:31:13.800831347Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:698487ed-8e77-459d-9b44-ac3ba0217665","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8pr8-hf3g-4qvf","advisory_id":"698487ed-8e77-459d-9b44-ac3ba0217665","event_types":["advisory"],"published_at":"2026-10-25T09:17:53.885517+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/34145"},"members":[{"id":34145,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8pr8-hf3g-4qvf","summary":"CGA-8pr8-hf3g-4qvf","evidence":"osv:CGA-8pr8-hf3g-4qvf","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r1","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8pr8-hf3g-4qvf","aliases":["CGA-8pr8-hf3g-4qvf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r1"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8pr8-hf3g-4qvf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T00:59:50Z"}]}}],"modified":"2026-09-30T04:31:13.800831347Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:698487ed-8e77-459d-9b44-ac3ba0217665","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8pr8-hf3g-4qvf","advisory_id":"698487ed-8e77-459d-9b44-ac3ba0217665","event_types":["advisory"],"published_at":"2026-10-25T09:17:53.885517+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:19:25+00:00","detail_url":"/events/34145"}]}},{"id":30647,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8f9m-26mc-gm26","summary":"CGA-8f9m-26mc-gm26","evidence":"osv:CGA-8f9m-26mc-gm26","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8f9m-26mc-gm26","aliases":["CGA-8f9m-26mc-gm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:15:36.247147966Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38faac48-a955-4156-8b27-aaf10440ca8f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8f9m-26mc-gm26","advisory_id":"38faac48-a955-4156-8b27-aaf10440ca8f","event_types":["advisory"],"published_at":"2026-10-25T20:39:42.112999+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/advisories/advisory%3A38faac48-a955-4156-8b27-aaf10440ca8f","group":{"id":"advisory:38faac48-a955-4156-8b27-aaf10440ca8f","revision":1,"primary_event_id":65642,"change":"published","superseded_by":[],"changed":{"id":65642,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8f9m-26mc-gm26","summary":"CGA-8f9m-26mc-gm26","evidence":"osv:CGA-8f9m-26mc-gm26","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8f9m-26mc-gm26","aliases":["CGA-8f9m-26mc-gm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:15:36.247147966Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38faac48-a955-4156-8b27-aaf10440ca8f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8f9m-26mc-gm26","advisory_id":"38faac48-a955-4156-8b27-aaf10440ca8f","event_types":["advisory"],"published_at":"2026-10-25T20:39:42.112999+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/events/65642"},"members":[{"id":65642,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8f9m-26mc-gm26","summary":"CGA-8f9m-26mc-gm26","evidence":"osv:CGA-8f9m-26mc-gm26","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"gradle-9","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r2","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8f9m-26mc-gm26","aliases":["CGA-8f9m-26mc-gm26"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/chainguard/gradle-9?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r2"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/wolfi/gradle-9?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8f9m-26mc-gm26.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/share/java/gradle/lib/jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T01:35:39Z"}]}}],"modified":"2026-10-02T05:15:36.247147966Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:38faac48-a955-4156-8b27-aaf10440ca8f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8f9m-26mc-gm26","advisory_id":"38faac48-a955-4156-8b27-aaf10440ca8f","event_types":["advisory"],"published_at":"2026-10-25T20:39:42.112999+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:49:40+00:00","detail_url":"/events/65642"}]}},{"id":14917,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-fqv4-2x43-g5wj","summary":"MINI-fqv4-2x43-g5wj","evidence":"osv:MINI-fqv4-2x43-g5wj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-fqv4-2x43-g5wj","aliases":["MINI-fqv4-2x43-g5wj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r0"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/minimos/gradle-9","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-fqv4-2x43-g5wj.json"}}],"modified":"2026-09-25T03:30:06.796121196Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:77f0427a-88f4-478a-a81d-67fa7de1e3d3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-fqv4-2x43-g5wj","advisory_id":"77f0427a-88f4-478a-a81d-67fa7de1e3d3","event_types":["advisory"],"published_at":"2026-10-25T00:48:05.035369+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T02:52:19+00:00","detail_url":"/advisories/advisory%3A77f0427a-88f4-478a-a81d-67fa7de1e3d3","group":{"id":"advisory:77f0427a-88f4-478a-a81d-67fa7de1e3d3","revision":1,"primary_event_id":14826,"change":"published","superseded_by":[],"changed":{"id":14826,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-fqv4-2x43-g5wj","summary":"MINI-fqv4-2x43-g5wj","evidence":"osv:MINI-fqv4-2x43-g5wj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-fqv4-2x43-g5wj","aliases":["MINI-fqv4-2x43-g5wj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r0"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/minimos/gradle-9","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-fqv4-2x43-g5wj.json"}}],"modified":"2026-09-25T03:30:06.796121196Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:77f0427a-88f4-478a-a81d-67fa7de1e3d3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-fqv4-2x43-g5wj","advisory_id":"77f0427a-88f4-478a-a81d-67fa7de1e3d3","event_types":["advisory"],"published_at":"2026-10-25T00:48:05.035369+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T02:52:19+00:00","detail_url":"/events/14826"},"members":[{"id":14826,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-fqv4-2x43-g5wj","summary":"MINI-fqv4-2x43-g5wj","evidence":"osv:MINI-fqv4-2x43-g5wj","products":[{"name":{"value":"gradle-9","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.8.0-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-fqv4-2x43-g5wj","aliases":["MINI-fqv4-2x43-g5wj"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.8.0-r0"}]}],"package":{"name":"gradle-9","purl":"pkg:apk/minimos/gradle-9","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-fqv4-2x43-g5wj.json"}}],"modified":"2026-09-25T03:30:06.796121196Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:77f0427a-88f4-478a-a81d-67fa7de1e3d3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-fqv4-2x43-g5wj","advisory_id":"77f0427a-88f4-478a-a81d-67fa7de1e3d3","event_types":["advisory"],"published_at":"2026-10-25T00:48:05.035369+00:00","technologies":["core-osv","gradle-9"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-25T02:52:19+00:00","detail_url":"/events/14826"}]}}],"next_after":72028,"next_before":14917}