{"schema_version":"2","view":"grouped","data":[{"id":71822,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-fph9-6qmg-3qjf","summary":"CGA-fph9-6qmg-3qjf","evidence":"osv:CGA-fph9-6qmg-3qjf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fph9-6qmg-3qjf","aliases":["CGA-fph9-6qmg-3qjf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fph9-6qmg-3qjf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:07Z"}]}}],"modified":"2026-10-02T23:01:30.931486307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e434aa-ddfd-40d1-aa56-7f09b576c952","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fph9-6qmg-3qjf","advisory_id":"25e434aa-ddfd-40d1-aa56-7f09b576c952","event_types":["advisory"],"published_at":"2026-10-25T23:41:15.216709+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/advisories/advisory%3A25e434aa-ddfd-40d1-aa56-7f09b576c952","group":{"id":"advisory:25e434aa-ddfd-40d1-aa56-7f09b576c952","revision":1,"primary_event_id":72299,"change":"published","superseded_by":[],"changed":{"id":72299,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-fph9-6qmg-3qjf","summary":"CGA-fph9-6qmg-3qjf","evidence":"osv:CGA-fph9-6qmg-3qjf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fph9-6qmg-3qjf","aliases":["CGA-fph9-6qmg-3qjf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fph9-6qmg-3qjf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:07Z"}]}}],"modified":"2026-10-02T23:01:30.931486307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e434aa-ddfd-40d1-aa56-7f09b576c952","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fph9-6qmg-3qjf","advisory_id":"25e434aa-ddfd-40d1-aa56-7f09b576c952","event_types":["advisory"],"published_at":"2026-10-25T23:41:15.216709+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/events/72299"},"members":[{"id":72299,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-fph9-6qmg-3qjf","summary":"CGA-fph9-6qmg-3qjf","evidence":"osv:CGA-fph9-6qmg-3qjf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fph9-6qmg-3qjf","aliases":["CGA-fph9-6qmg-3qjf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fph9-6qmg-3qjf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:07Z"}]}}],"modified":"2026-10-02T23:01:30.931486307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:25e434aa-ddfd-40d1-aa56-7f09b576c952","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fph9-6qmg-3qjf","advisory_id":"25e434aa-ddfd-40d1-aa56-7f09b576c952","event_types":["advisory"],"published_at":"2026-10-25T23:41:15.216709+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/events/72299"}]}},{"id":71727,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-4vrq-h768-26fh","summary":"CGA-4vrq-h768-26fh","evidence":"osv:CGA-4vrq-h768-26fh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4vrq-h768-26fh","aliases":["CGA-4vrq-h768-26fh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4vrq-h768-26fh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:01:21.597086504Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a580ee0-a4bd-459b-b41d-ce8394543367","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4vrq-h768-26fh","advisory_id":"6a580ee0-a4bd-459b-b41d-ce8394543367","event_types":["advisory"],"published_at":"2026-10-25T23:32:31.098578+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/advisories/advisory%3A6a580ee0-a4bd-459b-b41d-ce8394543367","group":{"id":"advisory:6a580ee0-a4bd-459b-b41d-ce8394543367","revision":1,"primary_event_id":72172,"change":"published","superseded_by":[],"changed":{"id":72172,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-4vrq-h768-26fh","summary":"CGA-4vrq-h768-26fh","evidence":"osv:CGA-4vrq-h768-26fh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4vrq-h768-26fh","aliases":["CGA-4vrq-h768-26fh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4vrq-h768-26fh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:01:21.597086504Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a580ee0-a4bd-459b-b41d-ce8394543367","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4vrq-h768-26fh","advisory_id":"6a580ee0-a4bd-459b-b41d-ce8394543367","event_types":["advisory"],"published_at":"2026-10-25T23:32:31.098578+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/events/72172"},"members":[{"id":72172,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-4vrq-h768-26fh","summary":"CGA-4vrq-h768-26fh","evidence":"osv:CGA-4vrq-h768-26fh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4vrq-h768-26fh","aliases":["CGA-4vrq-h768-26fh"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4vrq-h768-26fh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:01:21.597086504Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6a580ee0-a4bd-459b-b41d-ce8394543367","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4vrq-h768-26fh","advisory_id":"6a580ee0-a4bd-459b-b41d-ce8394543367","event_types":["advisory"],"published_at":"2026-10-25T23:32:31.098578+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/events/72172"}]}},{"id":71699,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7x4v-25vr-vxjc","summary":"CGA-7x4v-25vr-vxjc","evidence":"osv:CGA-7x4v-25vr-vxjc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7x4v-25vr-vxjc","aliases":["CGA-7x4v-25vr-vxjc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7x4v-25vr-vxjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:06Z"}]}}],"modified":"2026-10-02T23:01:18.653126085Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bde5bd7-90e0-49ec-8475-4198b58d28b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7x4v-25vr-vxjc","advisory_id":"5bde5bd7-90e0-49ec-8475-4198b58d28b7","event_types":["advisory"],"published_at":"2026-10-25T23:30:19.709183+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/advisories/advisory%3A5bde5bd7-90e0-49ec-8475-4198b58d28b7","group":{"id":"advisory:5bde5bd7-90e0-49ec-8475-4198b58d28b7","revision":1,"primary_event_id":72139,"change":"published","superseded_by":[],"changed":{"id":72139,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7x4v-25vr-vxjc","summary":"CGA-7x4v-25vr-vxjc","evidence":"osv:CGA-7x4v-25vr-vxjc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7x4v-25vr-vxjc","aliases":["CGA-7x4v-25vr-vxjc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7x4v-25vr-vxjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:06Z"}]}}],"modified":"2026-10-02T23:01:18.653126085Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bde5bd7-90e0-49ec-8475-4198b58d28b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7x4v-25vr-vxjc","advisory_id":"5bde5bd7-90e0-49ec-8475-4198b58d28b7","event_types":["advisory"],"published_at":"2026-10-25T23:30:19.709183+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/events/72139"},"members":[{"id":72139,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-7x4v-25vr-vxjc","summary":"CGA-7x4v-25vr-vxjc","evidence":"osv:CGA-7x4v-25vr-vxjc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-7x4v-25vr-vxjc","aliases":["CGA-7x4v-25vr-vxjc"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7x4v-25vr-vxjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:19:06Z"}]}}],"modified":"2026-10-02T23:01:18.653126085Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:5bde5bd7-90e0-49ec-8475-4198b58d28b7","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7x4v-25vr-vxjc","advisory_id":"5bde5bd7-90e0-49ec-8475-4198b58d28b7","event_types":["advisory"],"published_at":"2026-10-25T23:30:19.709183+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:07:07+00:00","detail_url":"/events/72139"}]}},{"id":71006,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-3657-p6x2-796q","summary":"CGA-3657-p6x2-796q","evidence":"osv:CGA-3657-p6x2-796q","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3657-p6x2-796q","aliases":["CGA-3657-p6x2-796q"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3657-p6x2-796q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:00:05.483771029Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:771e3e0d-f652-43cd-8aaf-b2a13baf5c21","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3657-p6x2-796q","advisory_id":"771e3e0d-f652-43cd-8aaf-b2a13baf5c21","event_types":["advisory"],"published_at":"2026-10-25T22:46:36.902232+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/advisories/advisory%3A771e3e0d-f652-43cd-8aaf-b2a13baf5c21","group":{"id":"advisory:771e3e0d-f652-43cd-8aaf-b2a13baf5c21","revision":1,"primary_event_id":71380,"change":"published","superseded_by":[],"changed":{"id":71380,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-3657-p6x2-796q","summary":"CGA-3657-p6x2-796q","evidence":"osv:CGA-3657-p6x2-796q","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3657-p6x2-796q","aliases":["CGA-3657-p6x2-796q"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3657-p6x2-796q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:00:05.483771029Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:771e3e0d-f652-43cd-8aaf-b2a13baf5c21","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3657-p6x2-796q","advisory_id":"771e3e0d-f652-43cd-8aaf-b2a13baf5c21","event_types":["advisory"],"published_at":"2026-10-25T22:46:36.902232+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/events/71380"},"members":[{"id":71380,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-3657-p6x2-796q","summary":"CGA-3657-p6x2-796q","evidence":"osv:CGA-3657-p6x2-796q","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.24.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-3657-p6x2-796q","aliases":["CGA-3657-p6x2-796q"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3657-p6x2-796q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-core-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:06:07Z"}]}}],"modified":"2026-10-02T23:00:05.483771029Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:771e3e0d-f652-43cd-8aaf-b2a13baf5c21","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3657-p6x2-796q","advisory_id":"771e3e0d-f652-43cd-8aaf-b2a13baf5c21","event_types":["advisory"],"published_at":"2026-10-25T22:46:36.902232+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T11:31:14+00:00","detail_url":"/events/71380"}]}},{"id":70804,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-wcf6-2jcj-6wmf","summary":"CGA-wcf6-2jcj-6wmf","evidence":"osv:CGA-wcf6-2jcj-6wmf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wcf6-2jcj-6wmf","aliases":["CGA-wcf6-2jcj-6wmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcf6-2jcj-6wmf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:46.647580054Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e1b7a29-616c-45de-abe2-09bff08448a7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcf6-2jcj-6wmf","advisory_id":"5e1b7a29-616c-45de-abe2-09bff08448a7","event_types":["advisory"],"published_at":"2026-10-25T22:40:13.300048+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/advisories/advisory%3A5e1b7a29-616c-45de-abe2-09bff08448a7","group":{"id":"advisory:5e1b7a29-616c-45de-abe2-09bff08448a7","revision":1,"primary_event_id":71175,"change":"published","superseded_by":[],"changed":{"id":71175,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-wcf6-2jcj-6wmf","summary":"CGA-wcf6-2jcj-6wmf","evidence":"osv:CGA-wcf6-2jcj-6wmf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wcf6-2jcj-6wmf","aliases":["CGA-wcf6-2jcj-6wmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcf6-2jcj-6wmf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:46.647580054Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e1b7a29-616c-45de-abe2-09bff08448a7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcf6-2jcj-6wmf","advisory_id":"5e1b7a29-616c-45de-abe2-09bff08448a7","event_types":["advisory"],"published_at":"2026-10-25T22:40:13.300048+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/events/71175"},"members":[{"id":71175,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-wcf6-2jcj-6wmf","summary":"CGA-wcf6-2jcj-6wmf","evidence":"osv:CGA-wcf6-2jcj-6wmf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-wcf6-2jcj-6wmf","aliases":["CGA-wcf6-2jcj-6wmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wcf6-2jcj-6wmf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:46.647580054Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5e1b7a29-616c-45de-abe2-09bff08448a7","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wcf6-2jcj-6wmf","advisory_id":"5e1b7a29-616c-45de-abe2-09bff08448a7","event_types":["advisory"],"published_at":"2026-10-25T22:40:13.300048+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/events/71175"}]}},{"id":70172,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-5wfm-2wv4-p9vc","summary":"CGA-5wfm-2wv4-p9vc","evidence":"osv:CGA-5wfm-2wv4-p9vc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5wfm-2wv4-p9vc","aliases":["CGA-5wfm-2wv4-p9vc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5wfm-2wv4-p9vc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:16.100747018Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a15931d-b08d-4d15-8efb-bd8f99c48506","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5wfm-2wv4-p9vc","advisory_id":"5a15931d-b08d-4d15-8efb-bd8f99c48506","event_types":["advisory"],"published_at":"2026-10-25T22:16:22.353109+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/advisories/advisory%3A5a15931d-b08d-4d15-8efb-bd8f99c48506","group":{"id":"advisory:5a15931d-b08d-4d15-8efb-bd8f99c48506","revision":1,"primary_event_id":70542,"change":"published","superseded_by":[],"changed":{"id":70542,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-5wfm-2wv4-p9vc","summary":"CGA-5wfm-2wv4-p9vc","evidence":"osv:CGA-5wfm-2wv4-p9vc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5wfm-2wv4-p9vc","aliases":["CGA-5wfm-2wv4-p9vc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5wfm-2wv4-p9vc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:16.100747018Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a15931d-b08d-4d15-8efb-bd8f99c48506","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5wfm-2wv4-p9vc","advisory_id":"5a15931d-b08d-4d15-8efb-bd8f99c48506","event_types":["advisory"],"published_at":"2026-10-25T22:16:22.353109+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/events/70542"},"members":[{"id":70542,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-5wfm-2wv4-p9vc","summary":"CGA-5wfm-2wv4-p9vc","evidence":"osv:CGA-5wfm-2wv4-p9vc","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-5wfm-2wv4-p9vc","aliases":["CGA-5wfm-2wv4-p9vc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5wfm-2wv4-p9vc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T21:13:07Z"}]}}],"modified":"2026-10-02T18:25:16.100747018Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a15931d-b08d-4d15-8efb-bd8f99c48506","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5wfm-2wv4-p9vc","advisory_id":"5a15931d-b08d-4d15-8efb-bd8f99c48506","event_types":["advisory"],"published_at":"2026-10-25T22:16:22.353109+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:56:57+00:00","detail_url":"/events/70542"}]}},{"id":65062,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-fxw5-g9f5-85gf","summary":"CGA-fxw5-g9f5-85gf","evidence":"osv:CGA-fxw5-g9f5-85gf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fxw5-g9f5-85gf","aliases":["CGA-fxw5-g9f5-85gf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fxw5-g9f5-85gf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:29Z"}]}}],"modified":"2026-10-01T23:01:00.745087327Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:542bf388-dbca-42ee-b5d0-31c328ad2843","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fxw5-g9f5-85gf","advisory_id":"542bf388-dbca-42ee-b5d0-31c328ad2843","event_types":["advisory"],"published_at":"2026-10-25T19:59:55.544699+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/advisories/advisory%3A542bf388-dbca-42ee-b5d0-31c328ad2843","group":{"id":"advisory:542bf388-dbca-42ee-b5d0-31c328ad2843","revision":1,"primary_event_id":64389,"change":"published","superseded_by":[],"changed":{"id":64389,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-fxw5-g9f5-85gf","summary":"CGA-fxw5-g9f5-85gf","evidence":"osv:CGA-fxw5-g9f5-85gf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fxw5-g9f5-85gf","aliases":["CGA-fxw5-g9f5-85gf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fxw5-g9f5-85gf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:29Z"}]}}],"modified":"2026-10-01T23:01:00.745087327Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:542bf388-dbca-42ee-b5d0-31c328ad2843","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fxw5-g9f5-85gf","advisory_id":"542bf388-dbca-42ee-b5d0-31c328ad2843","event_types":["advisory"],"published_at":"2026-10-25T19:59:55.544699+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/events/64389"},"members":[{"id":64389,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-fxw5-g9f5-85gf","summary":"CGA-fxw5-g9f5-85gf","evidence":"osv:CGA-fxw5-g9f5-85gf","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-fxw5-g9f5-85gf","aliases":["CGA-fxw5-g9f5-85gf"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fxw5-g9f5-85gf.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:29Z"}]}}],"modified":"2026-10-01T23:01:00.745087327Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:542bf388-dbca-42ee-b5d0-31c328ad2843","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fxw5-g9f5-85gf","advisory_id":"542bf388-dbca-42ee-b5d0-31c328ad2843","event_types":["advisory"],"published_at":"2026-10-25T19:59:55.544699+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/events/64389"}]}},{"id":64852,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-4gxr-hmf9-6jwr","summary":"CGA-4gxr-hmf9-6jwr","evidence":"osv:CGA-4gxr-hmf9-6jwr","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4gxr-hmf9-6jwr","aliases":["CGA-4gxr-hmf9-6jwr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4gxr-hmf9-6jwr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:28Z"}]}}],"modified":"2026-10-01T23:00:36.631188889Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4gxr-hmf9-6jwr","advisory_id":"dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","event_types":["advisory"],"published_at":"2026-10-25T19:56:28.512429+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/advisories/advisory%3Adca9f876-2a0e-4a46-8bfe-96730d0cc2a2","group":{"id":"advisory:dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","revision":1,"primary_event_id":64191,"change":"published","superseded_by":[],"changed":{"id":64191,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-4gxr-hmf9-6jwr","summary":"CGA-4gxr-hmf9-6jwr","evidence":"osv:CGA-4gxr-hmf9-6jwr","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4gxr-hmf9-6jwr","aliases":["CGA-4gxr-hmf9-6jwr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4gxr-hmf9-6jwr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:28Z"}]}}],"modified":"2026-10-01T23:00:36.631188889Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4gxr-hmf9-6jwr","advisory_id":"dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","event_types":["advisory"],"published_at":"2026-10-25T19:56:28.512429+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/events/64191"},"members":[{"id":64191,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-4gxr-hmf9-6jwr","summary":"CGA-4gxr-hmf9-6jwr","evidence":"osv:CGA-4gxr-hmf9-6jwr","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-4gxr-hmf9-6jwr","aliases":["CGA-4gxr-hmf9-6jwr"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r2"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4gxr-hmf9-6jwr.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.10","component_type":"java-archive","component_version":"2.18.10","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.10.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T18:36:28Z"}]}}],"modified":"2026-10-01T23:00:36.631188889Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-4gxr-hmf9-6jwr","advisory_id":"dca9f876-2a0e-4a46-8bfe-96730d0cc2a2","event_types":["advisory"],"published_at":"2026-10-25T19:56:28.512429+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T12:31:25+00:00","detail_url":"/events/64191"}]}},{"id":44939,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rx63-w3cc-w2gh","summary":"CGA-rx63-w3cc-w2gh","evidence":"osv:CGA-rx63-w3cc-w2gh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rx63-w3cc-w2gh","aliases":["CGA-rx63-w3cc-w2gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rx63-w3cc-w2gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:02:08.858414065Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05e4c670-1cfd-419f-befc-0495e4ddbee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rx63-w3cc-w2gh","advisory_id":"05e4c670-1cfd-419f-befc-0495e4ddbee2","event_types":["advisory"],"published_at":"2026-10-25T12:18:04.167862+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/advisories/advisory%3A05e4c670-1cfd-419f-befc-0495e4ddbee2","group":{"id":"advisory:05e4c670-1cfd-419f-befc-0495e4ddbee2","revision":1,"primary_event_id":44509,"change":"published","superseded_by":[],"changed":{"id":44509,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rx63-w3cc-w2gh","summary":"CGA-rx63-w3cc-w2gh","evidence":"osv:CGA-rx63-w3cc-w2gh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rx63-w3cc-w2gh","aliases":["CGA-rx63-w3cc-w2gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rx63-w3cc-w2gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:02:08.858414065Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05e4c670-1cfd-419f-befc-0495e4ddbee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rx63-w3cc-w2gh","advisory_id":"05e4c670-1cfd-419f-befc-0495e4ddbee2","event_types":["advisory"],"published_at":"2026-10-25T12:18:04.167862+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/events/44509"},"members":[{"id":44509,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rx63-w3cc-w2gh","summary":"CGA-rx63-w3cc-w2gh","evidence":"osv:CGA-rx63-w3cc-w2gh","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rx63-w3cc-w2gh","aliases":["CGA-rx63-w3cc-w2gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rx63-w3cc-w2gh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:02:08.858414065Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:05e4c670-1cfd-419f-befc-0495e4ddbee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rx63-w3cc-w2gh","advisory_id":"05e4c670-1cfd-419f-befc-0495e4ddbee2","event_types":["advisory"],"published_at":"2026-10-25T12:18:04.167862+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/events/44509"}]}},{"id":43863,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jf4c-8qrp-5qq4","summary":"CGA-jf4c-8qrp-5qq4","evidence":"osv:CGA-jf4c-8qrp-5qq4","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jf4c-8qrp-5qq4","aliases":["CGA-jf4c-8qrp-5qq4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jf4c-8qrp-5qq4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:02:00.255537843Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad873ef2-91c0-4009-a80f-a75127e86099","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jf4c-8qrp-5qq4","advisory_id":"ad873ef2-91c0-4009-a80f-a75127e86099","event_types":["advisory"],"published_at":"2026-10-25T11:59:57.49715+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:02+00:00","detail_url":"/advisories/advisory%3Aad873ef2-91c0-4009-a80f-a75127e86099","group":{"id":"advisory:ad873ef2-91c0-4009-a80f-a75127e86099","revision":1,"primary_event_id":43452,"change":"published","superseded_by":[],"changed":{"id":43452,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jf4c-8qrp-5qq4","summary":"CGA-jf4c-8qrp-5qq4","evidence":"osv:CGA-jf4c-8qrp-5qq4","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jf4c-8qrp-5qq4","aliases":["CGA-jf4c-8qrp-5qq4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jf4c-8qrp-5qq4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:02:00.255537843Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad873ef2-91c0-4009-a80f-a75127e86099","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jf4c-8qrp-5qq4","advisory_id":"ad873ef2-91c0-4009-a80f-a75127e86099","event_types":["advisory"],"published_at":"2026-10-25T11:59:57.49715+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:02+00:00","detail_url":"/events/43452"},"members":[{"id":43452,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jf4c-8qrp-5qq4","summary":"CGA-jf4c-8qrp-5qq4","evidence":"osv:CGA-jf4c-8qrp-5qq4","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jf4c-8qrp-5qq4","aliases":["CGA-jf4c-8qrp-5qq4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jf4c-8qrp-5qq4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:02:00.255537843Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ad873ef2-91c0-4009-a80f-a75127e86099","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jf4c-8qrp-5qq4","advisory_id":"ad873ef2-91c0-4009-a80f-a75127e86099","event_types":["advisory"],"published_at":"2026-10-25T11:59:57.49715+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:02+00:00","detail_url":"/events/43452"}]}},{"id":43723,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-cmgm-jh5q-7222","summary":"CGA-cmgm-jh5q-7222","evidence":"osv:CGA-cmgm-jh5q-7222","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-cmgm-jh5q-7222","aliases":["CGA-cmgm-jh5q-7222"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmgm-jh5q-7222.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:08Z"}]}}],"modified":"2026-09-30T17:01:56.630441391Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0fdf220-5939-47f9-997f-310197dc8c1c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmgm-jh5q-7222","advisory_id":"a0fdf220-5939-47f9-997f-310197dc8c1c","event_types":["advisory"],"published_at":"2026-10-25T11:58:23.43531+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:06+00:00","detail_url":"/advisories/advisory%3Aa0fdf220-5939-47f9-997f-310197dc8c1c","group":{"id":"advisory:a0fdf220-5939-47f9-997f-310197dc8c1c","revision":1,"primary_event_id":43315,"change":"published","superseded_by":[],"changed":{"id":43315,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-cmgm-jh5q-7222","summary":"CGA-cmgm-jh5q-7222","evidence":"osv:CGA-cmgm-jh5q-7222","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-cmgm-jh5q-7222","aliases":["CGA-cmgm-jh5q-7222"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmgm-jh5q-7222.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:08Z"}]}}],"modified":"2026-09-30T17:01:56.630441391Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0fdf220-5939-47f9-997f-310197dc8c1c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmgm-jh5q-7222","advisory_id":"a0fdf220-5939-47f9-997f-310197dc8c1c","event_types":["advisory"],"published_at":"2026-10-25T11:58:23.43531+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:06+00:00","detail_url":"/events/43315"},"members":[{"id":43315,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-cmgm-jh5q-7222","summary":"CGA-cmgm-jh5q-7222","evidence":"osv:CGA-cmgm-jh5q-7222","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-cmgm-jh5q-7222","aliases":["CGA-cmgm-jh5q-7222"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cmgm-jh5q-7222.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:08Z"}]}}],"modified":"2026-09-30T17:01:56.630441391Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a0fdf220-5939-47f9-997f-310197dc8c1c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cmgm-jh5q-7222","advisory_id":"a0fdf220-5939-47f9-997f-310197dc8c1c","event_types":["advisory"],"published_at":"2026-10-25T11:58:23.43531+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:06+00:00","detail_url":"/events/43315"}]}},{"id":41021,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-75pm-43f6-cqw8","summary":"CGA-75pm-43f6-cqw8","evidence":"osv:CGA-75pm-43f6-cqw8","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-75pm-43f6-cqw8","aliases":["CGA-75pm-43f6-cqw8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-75pm-43f6-cqw8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:07Z"}]}}],"modified":"2026-09-30T17:01:24.968433594Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-75pm-43f6-cqw8","advisory_id":"e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","event_types":["advisory"],"published_at":"2026-10-25T11:06:48.012194+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/advisories/advisory%3Ae8a1ce9f-842a-427f-9f1e-ac268e7ecd90","group":{"id":"advisory:e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","revision":1,"primary_event_id":40641,"change":"published","superseded_by":[],"changed":{"id":40641,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-75pm-43f6-cqw8","summary":"CGA-75pm-43f6-cqw8","evidence":"osv:CGA-75pm-43f6-cqw8","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-75pm-43f6-cqw8","aliases":["CGA-75pm-43f6-cqw8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-75pm-43f6-cqw8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:07Z"}]}}],"modified":"2026-09-30T17:01:24.968433594Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-75pm-43f6-cqw8","advisory_id":"e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","event_types":["advisory"],"published_at":"2026-10-25T11:06:48.012194+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/events/40641"},"members":[{"id":40641,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-75pm-43f6-cqw8","summary":"CGA-75pm-43f6-cqw8","evidence":"osv:CGA-75pm-43f6-cqw8","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-75pm-43f6-cqw8","aliases":["CGA-75pm-43f6-cqw8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-75pm-43f6-cqw8.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:07Z"}]}}],"modified":"2026-09-30T17:01:24.968433594Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-75pm-43f6-cqw8","advisory_id":"e8a1ce9f-842a-427f-9f1e-ac268e7ecd90","event_types":["advisory"],"published_at":"2026-10-25T11:06:48.012194+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/events/40641"}]}},{"id":40735,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2xrr-36cf-v35g","summary":"CGA-2xrr-36cf-v35g","evidence":"osv:CGA-2xrr-36cf-v35g","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2xrr-36cf-v35g","aliases":["CGA-2xrr-36cf-v35g"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2xrr-36cf-v35g.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:00:48.862774862Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:52ed50f1-f280-45d7-aca5-029f8fc9cd08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2xrr-36cf-v35g","advisory_id":"52ed50f1-f280-45d7-aca5-029f8fc9cd08","event_types":["advisory"],"published_at":"2026-10-25T11:02:03.877735+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/advisories/advisory%3A52ed50f1-f280-45d7-aca5-029f8fc9cd08","group":{"id":"advisory:52ed50f1-f280-45d7-aca5-029f8fc9cd08","revision":1,"primary_event_id":40360,"change":"published","superseded_by":[],"changed":{"id":40360,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2xrr-36cf-v35g","summary":"CGA-2xrr-36cf-v35g","evidence":"osv:CGA-2xrr-36cf-v35g","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2xrr-36cf-v35g","aliases":["CGA-2xrr-36cf-v35g"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2xrr-36cf-v35g.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:00:48.862774862Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:52ed50f1-f280-45d7-aca5-029f8fc9cd08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2xrr-36cf-v35g","advisory_id":"52ed50f1-f280-45d7-aca5-029f8fc9cd08","event_types":["advisory"],"published_at":"2026-10-25T11:02:03.877735+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/events/40360"},"members":[{"id":40360,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2xrr-36cf-v35g","summary":"CGA-2xrr-36cf-v35g","evidence":"osv:CGA-2xrr-36cf-v35g","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2xrr-36cf-v35g","aliases":["CGA-2xrr-36cf-v35g"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2xrr-36cf-v35g.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T10:03:07Z"}]}}],"modified":"2026-09-30T17:00:48.862774862Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:52ed50f1-f280-45d7-aca5-029f8fc9cd08","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2xrr-36cf-v35g","advisory_id":"52ed50f1-f280-45d7-aca5-029f8fc9cd08","event_types":["advisory"],"published_at":"2026-10-25T11:02:03.877735+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:56:07+00:00","detail_url":"/events/40360"}]}},{"id":40608,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2gv8-pjxv-h2vg","summary":"CGA-2gv8-pjxv-h2vg","evidence":"osv:CGA-2gv8-pjxv-h2vg","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2gv8-pjxv-h2vg","aliases":["CGA-2gv8-pjxv-h2vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gv8-pjxv-h2vg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:00:23.747396545Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:33d3611a-d2aa-4302-b8de-df5736f19ea5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gv8-pjxv-h2vg","advisory_id":"33d3611a-d2aa-4302-b8de-df5736f19ea5","event_types":["advisory"],"published_at":"2026-10-25T10:59:36.897228+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/advisories/advisory%3A33d3611a-d2aa-4302-b8de-df5736f19ea5","group":{"id":"advisory:33d3611a-d2aa-4302-b8de-df5736f19ea5","revision":1,"primary_event_id":40234,"change":"published","superseded_by":[],"changed":{"id":40234,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2gv8-pjxv-h2vg","summary":"CGA-2gv8-pjxv-h2vg","evidence":"osv:CGA-2gv8-pjxv-h2vg","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2gv8-pjxv-h2vg","aliases":["CGA-2gv8-pjxv-h2vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gv8-pjxv-h2vg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:00:23.747396545Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:33d3611a-d2aa-4302-b8de-df5736f19ea5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gv8-pjxv-h2vg","advisory_id":"33d3611a-d2aa-4302-b8de-df5736f19ea5","event_types":["advisory"],"published_at":"2026-10-25T10:59:36.897228+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/events/40234"},"members":[{"id":40234,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-2gv8-pjxv-h2vg","summary":"CGA-2gv8-pjxv-h2vg","evidence":"osv:CGA-2gv8-pjxv-h2vg","products":[{"name":{"value":"kates-fips","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"1.23.0-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-2gv8-pjxv-h2vg","aliases":["CGA-2gv8-pjxv-h2vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.0-r1"}]}],"package":{"name":"kates-fips","purl":"pkg:apk/chainguard/kates-fips?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2gv8-pjxv-h2vg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.18.9","component_type":"java-archive","component_version":"2.18.9","component_location":"/usr/share/java/kates-fips/lib/main/com.fasterxml.jackson.core.jackson-databind-2.18.9.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T09:09:08Z"}]}}],"modified":"2026-09-30T17:00:23.747396545Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:33d3611a-d2aa-4302-b8de-df5736f19ea5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2gv8-pjxv-h2vg","advisory_id":"33d3611a-d2aa-4302-b8de-df5736f19ea5","event_types":["advisory"],"published_at":"2026-10-25T10:59:36.897228+00:00","technologies":["core-osv","kates-fips"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:29:01+00:00","detail_url":"/events/40234"}]}}],"next_after":71822,"next_before":40608}