{"schema_version":"2","view":"grouped","data":[{"id":72569,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-37cv-vphx-2jr5","summary":"CGA-37cv-vphx-2jr5","evidence":"osv:CGA-37cv-vphx-2jr5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-37cv-vphx-2jr5","aliases":["CGA-37cv-vphx-2jr5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37cv-vphx-2jr5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T21:49:07Z"}]}}],"modified":"2026-10-03T10:31:35.920973683Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89407.json","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core"]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:86c696ec-738b-4afe-a7da-684dc7787500","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37cv-vphx-2jr5","advisory_id":"86c696ec-738b-4afe-a7da-684dc7787500","event_types":["advisory"],"published_at":"2026-10-26T00:33:08.529769+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:59:38+00:00","detail_url":"/advisories/advisory%3A86c696ec-738b-4afe-a7da-684dc7787500","group":{"id":"advisory:86c696ec-738b-4afe-a7da-684dc7787500","revision":1,"primary_event_id":73246,"change":"published","superseded_by":[],"changed":{"id":73246,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-37cv-vphx-2jr5","summary":"CGA-37cv-vphx-2jr5","evidence":"osv:CGA-37cv-vphx-2jr5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-37cv-vphx-2jr5","aliases":["CGA-37cv-vphx-2jr5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37cv-vphx-2jr5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T21:49:07Z"}]}}],"modified":"2026-10-03T10:31:35.920973683Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89407.json","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core"]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:86c696ec-738b-4afe-a7da-684dc7787500","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37cv-vphx-2jr5","advisory_id":"86c696ec-738b-4afe-a7da-684dc7787500","event_types":["advisory"],"published_at":"2026-10-26T00:33:08.529769+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:59:38+00:00","detail_url":"/events/73246"},"members":[{"id":73246,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-37cv-vphx-2jr5","summary":"CGA-37cv-vphx-2jr5","evidence":"osv:CGA-37cv-vphx-2jr5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-37cv-vphx-2jr5","aliases":["CGA-37cv-vphx-2jr5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37cv-vphx-2jr5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T21:49:07Z"}]}}],"modified":"2026-10-03T10:31:35.920973683Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89407.json","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core"]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:86c696ec-738b-4afe-a7da-684dc7787500","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37cv-vphx-2jr5","advisory_id":"86c696ec-738b-4afe-a7da-684dc7787500","event_types":["advisory"],"published_at":"2026-10-26T00:33:08.529769+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T12:59:38+00:00","detail_url":"/events/73246"}]}},{"id":71045,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-f9c4-j72m-f83v","summary":"CGA-f9c4-j72m-f83v","evidence":"osv:CGA-f9c4-j72m-f83v","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-f9c4-j72m-f83v","aliases":["CGA-f9c4-j72m-f83v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9c4-j72m-f83v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:10.065794407Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12ce2c28-f51c-44eb-9d1b-cd01867c586f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9c4-j72m-f83v","advisory_id":"12ce2c28-f51c-44eb-9d1b-cd01867c586f","event_types":["advisory"],"published_at":"2026-10-25T22:48:21.642504+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/advisories/advisory%3A12ce2c28-f51c-44eb-9d1b-cd01867c586f","group":{"id":"advisory:12ce2c28-f51c-44eb-9d1b-cd01867c586f","revision":1,"primary_event_id":71419,"change":"published","superseded_by":[],"changed":{"id":71419,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-f9c4-j72m-f83v","summary":"CGA-f9c4-j72m-f83v","evidence":"osv:CGA-f9c4-j72m-f83v","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-f9c4-j72m-f83v","aliases":["CGA-f9c4-j72m-f83v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9c4-j72m-f83v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:10.065794407Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12ce2c28-f51c-44eb-9d1b-cd01867c586f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9c4-j72m-f83v","advisory_id":"12ce2c28-f51c-44eb-9d1b-cd01867c586f","event_types":["advisory"],"published_at":"2026-10-25T22:48:21.642504+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/events/71419"},"members":[{"id":71419,"cve_ids":["CVE-2026-89407"],"payload":{"kind":"advisory","title":"CGA-f9c4-j72m-f83v","summary":"CGA-f9c4-j72m-f83v","evidence":"osv:CGA-f9c4-j72m-f83v","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-f9c4-j72m-f83v","aliases":["CGA-f9c4-j72m-f83v"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-f9c4-j72m-f83v.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:10.065794407Z","provider":"osv","upstream":["CVE-2026-89407","GHSA-p6pp-m3f8-5c89"],"references":[]},"related_cves":[{"value":"CVE-2026-89407","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12ce2c28-f51c-44eb-9d1b-cd01867c586f","priority":{"reasons":["linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-89407","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"products":[{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.18.11","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"2.17.0","evidence":"/affected/0/versions"},{"value":"2.17.1","evidence":"/affected/0/versions"},{"value":"2.17.2","evidence":"/affected/0/versions"},{"value":"2.17.3","evidence":"/affected/0/versions"},{"value":"2.18.0","evidence":"/affected/0/versions"},{"value":"2.18.0-rc1","evidence":"/affected/0/versions"},{"value":"2.18.1","evidence":"/affected/0/versions"},{"value":"2.18.10","evidence":"/affected/0/versions"},{"value":"2.18.2","evidence":"/affected/0/versions"},{"value":"2.18.3","evidence":"/affected/0/versions"},{"value":"2.18.4","evidence":"/affected/0/versions"},{"value":"2.18.4.1","evidence":"/affected/0/versions"},{"value":"2.18.5","evidence":"/affected/0/versions"},{"value":"2.18.6","evidence":"/affected/0/versions"},{"value":"2.18.7","evidence":"/affected/0/versions"},{"value":"2.18.8","evidence":"/affected/0/versions"},{"value":"2.18.9","evidence":"/affected/0/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.21.7","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"2.19.0","evidence":"/affected/1/versions"},{"value":"2.19.1","evidence":"/affected/1/versions"},{"value":"2.19.2","evidence":"/affected/1/versions"},{"value":"2.19.3","evidence":"/affected/1/versions"},{"value":"2.19.4","evidence":"/affected/1/versions"},{"value":"2.20.0","evidence":"/affected/1/versions"},{"value":"2.20.0-rc1","evidence":"/affected/1/versions"},{"value":"2.20.1","evidence":"/affected/1/versions"},{"value":"2.20.2","evidence":"/affected/1/versions"},{"value":"2.21.0","evidence":"/affected/1/versions"},{"value":"2.21.1","evidence":"/affected/1/versions"},{"value":"2.21.2","evidence":"/affected/1/versions"},{"value":"2.21.3","evidence":"/affected/1/versions"},{"value":"2.21.4","evidence":"/affected/1/versions"},{"value":"2.21.5","evidence":"/affected/1/versions"},{"value":"2.21.6","evidence":"/affected/1/versions"}]},{"name":{"value":"com.fasterxml.jackson.core:jackson-core","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"2.22.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"2.22.0","evidence":"/affected/2/versions"},{"value":"2.22.1","evidence":"/affected/2/versions"},{"value":"2.22.2","evidence":"/affected/2/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.1.7","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"3.0.0","evidence":"/affected/3/versions"},{"value":"3.0.1","evidence":"/affected/3/versions"},{"value":"3.0.2","evidence":"/affected/3/versions"},{"value":"3.0.3","evidence":"/affected/3/versions"},{"value":"3.0.4","evidence":"/affected/3/versions"},{"value":"3.1.0","evidence":"/affected/3/versions"},{"value":"3.1.0-rc1","evidence":"/affected/3/versions"},{"value":"3.1.1","evidence":"/affected/3/versions"},{"value":"3.1.2","evidence":"/affected/3/versions"},{"value":"3.1.3","evidence":"/affected/3/versions"},{"value":"3.1.4","evidence":"/affected/3/versions"},{"value":"3.1.5","evidence":"/affected/3/versions"},{"value":"3.1.6","evidence":"/affected/3/versions"}]},{"name":{"value":"tools.jackson.core:jackson-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"3.2.2","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"3.2.0","evidence":"/affected/4/versions"},{"value":"3.2.1","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-p6pp-m3f8-5c89","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-f9c4-j72m-f83v","advisory_id":"12ce2c28-f51c-44eb-9d1b-cd01867c586f","event_types":["advisory"],"published_at":"2026-10-25T22:48:21.642504+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/events/71419"}]}},{"id":71044,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-8cjh-hm3m-pwh5","summary":"CGA-8cjh-hm3m-pwh5","evidence":"osv:CGA-8cjh-hm3m-pwh5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8cjh-hm3m-pwh5","aliases":["CGA-8cjh-hm3m-pwh5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8cjh-hm3m-pwh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:09.514362307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bace1361-d817-48d8-a85c-251fd77d3a30","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8cjh-hm3m-pwh5","advisory_id":"bace1361-d817-48d8-a85c-251fd77d3a30","event_types":["advisory"],"published_at":"2026-10-25T22:48:18.972029+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/advisories/advisory%3Abace1361-d817-48d8-a85c-251fd77d3a30","group":{"id":"advisory:bace1361-d817-48d8-a85c-251fd77d3a30","revision":1,"primary_event_id":71418,"change":"published","superseded_by":[],"changed":{"id":71418,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-8cjh-hm3m-pwh5","summary":"CGA-8cjh-hm3m-pwh5","evidence":"osv:CGA-8cjh-hm3m-pwh5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8cjh-hm3m-pwh5","aliases":["CGA-8cjh-hm3m-pwh5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8cjh-hm3m-pwh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:09.514362307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bace1361-d817-48d8-a85c-251fd77d3a30","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8cjh-hm3m-pwh5","advisory_id":"bace1361-d817-48d8-a85c-251fd77d3a30","event_types":["advisory"],"published_at":"2026-10-25T22:48:18.972029+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/events/71418"},"members":[{"id":71418,"cve_ids":["CVE-2026-89425"],"payload":{"kind":"advisory","title":"CGA-8cjh-hm3m-pwh5","summary":"CGA-8cjh-hm3m-pwh5","evidence":"osv:CGA-8cjh-hm3m-pwh5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8cjh-hm3m-pwh5","aliases":["CGA-8cjh-hm3m-pwh5"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r3"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8cjh-hm3m-pwh5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-core","component_purl":"pkg:maven/jackson-core@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-core-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T19:42:48Z"}]}}],"modified":"2026-10-02T23:00:09.514362307Z","provider":"osv","upstream":["CVE-2026-89425","GHSA-7hhh-6rmp-j9qf"],"references":[]},"related_cves":[{"value":"CVE-2026-89425","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bace1361-d817-48d8-a85c-251fd77d3a30","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8cjh-hm3m-pwh5","advisory_id":"bace1361-d817-48d8-a85c-251fd77d3a30","event_types":["advisory"],"published_at":"2026-10-25T22:48:18.972029+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T13:00:32+00:00","detail_url":"/events/71418"}]}},{"id":66254,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-hhp5-wx53-v38j","summary":"CGA-hhp5-wx53-v38j","evidence":"osv:CGA-hhp5-wx53-v38j","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-hhp5-wx53-v38j","aliases":["CGA-hhp5-wx53-v38j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hhp5-wx53-v38j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:17:19.505985014Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a7633da4-da50-4421-8610-5999985ff471","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hhp5-wx53-v38j","advisory_id":"a7633da4-da50-4421-8610-5999985ff471","event_types":["advisory"],"published_at":"2026-10-25T20:57:48.360095+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:19+00:00","detail_url":"/advisories/advisory%3Aa7633da4-da50-4421-8610-5999985ff471","group":{"id":"advisory:a7633da4-da50-4421-8610-5999985ff471","revision":1,"primary_event_id":66624,"change":"published","superseded_by":[],"changed":{"id":66624,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-hhp5-wx53-v38j","summary":"CGA-hhp5-wx53-v38j","evidence":"osv:CGA-hhp5-wx53-v38j","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-hhp5-wx53-v38j","aliases":["CGA-hhp5-wx53-v38j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hhp5-wx53-v38j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:17:19.505985014Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a7633da4-da50-4421-8610-5999985ff471","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hhp5-wx53-v38j","advisory_id":"a7633da4-da50-4421-8610-5999985ff471","event_types":["advisory"],"published_at":"2026-10-25T20:57:48.360095+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:19+00:00","detail_url":"/events/66624"},"members":[{"id":66624,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-hhp5-wx53-v38j","summary":"CGA-hhp5-wx53-v38j","evidence":"osv:CGA-hhp5-wx53-v38j","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-hhp5-wx53-v38j","aliases":["CGA-hhp5-wx53-v38j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hhp5-wx53-v38j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:17:19.505985014Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a7633da4-da50-4421-8610-5999985ff471","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hhp5-wx53-v38j","advisory_id":"a7633da4-da50-4421-8610-5999985ff471","event_types":["advisory"],"published_at":"2026-10-25T20:57:48.360095+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:19+00:00","detail_url":"/events/66624"}]}},{"id":64318,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmvp-5hc8-w7v4","summary":"CGA-mmvp-5hc8-w7v4","evidence":"osv:CGA-mmvp-5hc8-w7v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmvp-5hc8-w7v4","aliases":["CGA-mmvp-5hc8-w7v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmvp-5hc8-w7v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:09Z"}]}}],"modified":"2026-10-01T18:25:33.151898551Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:96a56c63-e637-4e3c-8915-92fba0818d01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmvp-5hc8-w7v4","advisory_id":"96a56c63-e637-4e3c-8915-92fba0818d01","event_types":["advisory"],"published_at":"2026-10-25T19:46:52.43788+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/advisories/advisory%3A96a56c63-e637-4e3c-8915-92fba0818d01","group":{"id":"advisory:96a56c63-e637-4e3c-8915-92fba0818d01","revision":1,"primary_event_id":63584,"change":"published","superseded_by":[],"changed":{"id":63584,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmvp-5hc8-w7v4","summary":"CGA-mmvp-5hc8-w7v4","evidence":"osv:CGA-mmvp-5hc8-w7v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmvp-5hc8-w7v4","aliases":["CGA-mmvp-5hc8-w7v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmvp-5hc8-w7v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:09Z"}]}}],"modified":"2026-10-01T18:25:33.151898551Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:96a56c63-e637-4e3c-8915-92fba0818d01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmvp-5hc8-w7v4","advisory_id":"96a56c63-e637-4e3c-8915-92fba0818d01","event_types":["advisory"],"published_at":"2026-10-25T19:46:52.43788+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/events/63584"},"members":[{"id":63584,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmvp-5hc8-w7v4","summary":"CGA-mmvp-5hc8-w7v4","evidence":"osv:CGA-mmvp-5hc8-w7v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmvp-5hc8-w7v4","aliases":["CGA-mmvp-5hc8-w7v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmvp-5hc8-w7v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:09Z"}]}}],"modified":"2026-10-01T18:25:33.151898551Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:96a56c63-e637-4e3c-8915-92fba0818d01","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmvp-5hc8-w7v4","advisory_id":"96a56c63-e637-4e3c-8915-92fba0818d01","event_types":["advisory"],"published_at":"2026-10-25T19:46:52.43788+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/events/63584"}]}},{"id":64310,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-m953-c8j9-9vjc","summary":"CGA-m953-c8j9-9vjc","evidence":"osv:CGA-m953-c8j9-9vjc","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-m953-c8j9-9vjc","aliases":["CGA-m953-c8j9-9vjc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m953-c8j9-9vjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-10-01T18:25:33.044681127Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1061992e-0e7c-4268-a7d4-9e08b93fc10a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m953-c8j9-9vjc","advisory_id":"1061992e-0e7c-4268-a7d4-9e08b93fc10a","event_types":["advisory"],"published_at":"2026-10-25T19:46:46.314829+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:09+00:00","detail_url":"/advisories/advisory%3A1061992e-0e7c-4268-a7d4-9e08b93fc10a","group":{"id":"advisory:1061992e-0e7c-4268-a7d4-9e08b93fc10a","revision":1,"primary_event_id":63576,"change":"published","superseded_by":[],"changed":{"id":63576,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-m953-c8j9-9vjc","summary":"CGA-m953-c8j9-9vjc","evidence":"osv:CGA-m953-c8j9-9vjc","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-m953-c8j9-9vjc","aliases":["CGA-m953-c8j9-9vjc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m953-c8j9-9vjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-10-01T18:25:33.044681127Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1061992e-0e7c-4268-a7d4-9e08b93fc10a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m953-c8j9-9vjc","advisory_id":"1061992e-0e7c-4268-a7d4-9e08b93fc10a","event_types":["advisory"],"published_at":"2026-10-25T19:46:46.314829+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:09+00:00","detail_url":"/events/63576"},"members":[{"id":63576,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-m953-c8j9-9vjc","summary":"CGA-m953-c8j9-9vjc","evidence":"osv:CGA-m953-c8j9-9vjc","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-m953-c8j9-9vjc","aliases":["CGA-m953-c8j9-9vjc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m953-c8j9-9vjc.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-10-01T18:25:33.044681127Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1061992e-0e7c-4268-a7d4-9e08b93fc10a","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m953-c8j9-9vjc","advisory_id":"1061992e-0e7c-4268-a7d4-9e08b93fc10a","event_types":["advisory"],"published_at":"2026-10-25T19:46:46.314829+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:09+00:00","detail_url":"/events/63576"}]}},{"id":59997,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-6gv5-pw57-rrmx","summary":"CGA-6gv5-pw57-rrmx","evidence":"osv:CGA-6gv5-pw57-rrmx","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-6gv5-pw57-rrmx","aliases":["CGA-6gv5-pw57-rrmx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6gv5-pw57-rrmx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:34.675521104Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:50f17866-4c29-400b-9931-d74049e41639","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6gv5-pw57-rrmx","advisory_id":"50f17866-4c29-400b-9931-d74049e41639","event_types":["advisory"],"published_at":"2026-10-25T20:51:28.190966+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/advisories/advisory%3A50f17866-4c29-400b-9931-d74049e41639","group":{"id":"advisory:50f17866-4c29-400b-9931-d74049e41639","revision":1,"primary_event_id":66192,"change":"published","superseded_by":[],"changed":{"id":66192,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-6gv5-pw57-rrmx","summary":"CGA-6gv5-pw57-rrmx","evidence":"osv:CGA-6gv5-pw57-rrmx","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-6gv5-pw57-rrmx","aliases":["CGA-6gv5-pw57-rrmx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6gv5-pw57-rrmx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:34.675521104Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:50f17866-4c29-400b-9931-d74049e41639","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6gv5-pw57-rrmx","advisory_id":"50f17866-4c29-400b-9931-d74049e41639","event_types":["advisory"],"published_at":"2026-10-25T20:51:28.190966+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/events/66192"},"members":[{"id":66192,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-6gv5-pw57-rrmx","summary":"CGA-6gv5-pw57-rrmx","evidence":"osv:CGA-6gv5-pw57-rrmx","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-6gv5-pw57-rrmx","aliases":["CGA-6gv5-pw57-rrmx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6gv5-pw57-rrmx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:34.675521104Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:50f17866-4c29-400b-9931-d74049e41639","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6gv5-pw57-rrmx","advisory_id":"50f17866-4c29-400b-9931-d74049e41639","event_types":["advisory"],"published_at":"2026-10-25T20:51:28.190966+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/events/66192"}]}},{"id":58649,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-37h5-q8mq-2wg7","summary":"CGA-37h5-q8mq-2wg7","evidence":"osv:CGA-37h5-q8mq-2wg7","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-37h5-q8mq-2wg7","aliases":["CGA-37h5-q8mq-2wg7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37h5-q8mq-2wg7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:17.437948742Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:805216e7-3965-4ec6-ab50-fa38566e12ca","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37h5-q8mq-2wg7","advisory_id":"805216e7-3965-4ec6-ab50-fa38566e12ca","event_types":["advisory"],"published_at":"2026-10-25T20:49:00.505108+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/advisories/advisory%3A805216e7-3965-4ec6-ab50-fa38566e12ca","group":{"id":"advisory:805216e7-3965-4ec6-ab50-fa38566e12ca","revision":1,"primary_event_id":66044,"change":"published","superseded_by":[],"changed":{"id":66044,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-37h5-q8mq-2wg7","summary":"CGA-37h5-q8mq-2wg7","evidence":"osv:CGA-37h5-q8mq-2wg7","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-37h5-q8mq-2wg7","aliases":["CGA-37h5-q8mq-2wg7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37h5-q8mq-2wg7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:17.437948742Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:805216e7-3965-4ec6-ab50-fa38566e12ca","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37h5-q8mq-2wg7","advisory_id":"805216e7-3965-4ec6-ab50-fa38566e12ca","event_types":["advisory"],"published_at":"2026-10-25T20:49:00.505108+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/events/66044"},"members":[{"id":66044,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-37h5-q8mq-2wg7","summary":"CGA-37h5-q8mq-2wg7","evidence":"osv:CGA-37h5-q8mq-2wg7","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-37h5-q8mq-2wg7","aliases":["CGA-37h5-q8mq-2wg7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-37h5-q8mq-2wg7.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:55:03Z"}]}}],"modified":"2026-10-02T05:16:17.437948742Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:805216e7-3965-4ec6-ab50-fa38566e12ca","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-37h5-q8mq-2wg7","advisory_id":"805216e7-3965-4ec6-ab50-fa38566e12ca","event_types":["advisory"],"published_at":"2026-10-25T20:49:00.505108+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T13:59:32+00:00","detail_url":"/events/66044"}]}},{"id":52331,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rgmj-8gqm-r45p","summary":"CGA-rgmj-8gqm-r45p","evidence":"osv:CGA-rgmj-8gqm-r45p","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rgmj-8gqm-r45p","aliases":["CGA-rgmj-8gqm-r45p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgmj-8gqm-r45p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-09-30T23:01:40.137886212Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9dbe8e67-2c5b-482b-aad1-bb898e21505e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgmj-8gqm-r45p","advisory_id":"9dbe8e67-2c5b-482b-aad1-bb898e21505e","event_types":["advisory"],"published_at":"2026-10-25T14:31:14.523597+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/advisories/advisory%3A9dbe8e67-2c5b-482b-aad1-bb898e21505e","group":{"id":"advisory:9dbe8e67-2c5b-482b-aad1-bb898e21505e","revision":1,"primary_event_id":51859,"change":"published","superseded_by":[],"changed":{"id":51859,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rgmj-8gqm-r45p","summary":"CGA-rgmj-8gqm-r45p","evidence":"osv:CGA-rgmj-8gqm-r45p","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rgmj-8gqm-r45p","aliases":["CGA-rgmj-8gqm-r45p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgmj-8gqm-r45p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-09-30T23:01:40.137886212Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9dbe8e67-2c5b-482b-aad1-bb898e21505e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgmj-8gqm-r45p","advisory_id":"9dbe8e67-2c5b-482b-aad1-bb898e21505e","event_types":["advisory"],"published_at":"2026-10-25T14:31:14.523597+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/events/51859"},"members":[{"id":51859,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-rgmj-8gqm-r45p","summary":"CGA-rgmj-8gqm-r45p","evidence":"osv:CGA-rgmj-8gqm-r45p","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-rgmj-8gqm-r45p","aliases":["CGA-rgmj-8gqm-r45p"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rgmj-8gqm-r45p.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T20:39:08Z"}]}}],"modified":"2026-09-30T23:01:40.137886212Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:9dbe8e67-2c5b-482b-aad1-bb898e21505e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rgmj-8gqm-r45p","advisory_id":"9dbe8e67-2c5b-482b-aad1-bb898e21505e","event_types":["advisory"],"published_at":"2026-10-25T14:31:14.523597+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:23:08+00:00","detail_url":"/events/51859"}]}},{"id":52322,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-wr53-rvfw-w7jh","summary":"CGA-wr53-rvfw-w7jh","evidence":"osv:CGA-wr53-rvfw-w7jh","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wr53-rvfw-w7jh","aliases":["CGA-wr53-rvfw-w7jh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr53-rvfw-w7jh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:37.433447097Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr53-rvfw-w7jh","advisory_id":"f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","event_types":["advisory"],"published_at":"2026-10-25T14:31:07.883353+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/advisories/advisory%3Af8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","group":{"id":"advisory:f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","revision":1,"primary_event_id":51850,"change":"published","superseded_by":[],"changed":{"id":51850,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-wr53-rvfw-w7jh","summary":"CGA-wr53-rvfw-w7jh","evidence":"osv:CGA-wr53-rvfw-w7jh","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wr53-rvfw-w7jh","aliases":["CGA-wr53-rvfw-w7jh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr53-rvfw-w7jh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:37.433447097Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr53-rvfw-w7jh","advisory_id":"f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","event_types":["advisory"],"published_at":"2026-10-25T14:31:07.883353+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/events/51850"},"members":[{"id":51850,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-wr53-rvfw-w7jh","summary":"CGA-wr53-rvfw-w7jh","evidence":"osv:CGA-wr53-rvfw-w7jh","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-wr53-rvfw-w7jh","aliases":["CGA-wr53-rvfw-w7jh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wr53-rvfw-w7jh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:37.433447097Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wr53-rvfw-w7jh","advisory_id":"f8f59c1f-aa20-4fcf-b9b8-e3fd4354f590","event_types":["advisory"],"published_at":"2026-10-25T14:31:07.883353+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/events/51850"}]}},{"id":52088,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-82m5-xm2h-g9v4","summary":"CGA-82m5-xm2h-g9v4","evidence":"osv:CGA-82m5-xm2h-g9v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-82m5-xm2h-g9v4","aliases":["CGA-82m5-xm2h-g9v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-82m5-xm2h-g9v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:12.929686124Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:88e10089-032d-4273-b6a3-a05acf58601e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-82m5-xm2h-g9v4","advisory_id":"88e10089-032d-4273-b6a3-a05acf58601e","event_types":["advisory"],"published_at":"2026-10-25T14:27:22.506225+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:07+00:00","detail_url":"/advisories/advisory%3A88e10089-032d-4273-b6a3-a05acf58601e","group":{"id":"advisory:88e10089-032d-4273-b6a3-a05acf58601e","revision":1,"primary_event_id":51616,"change":"published","superseded_by":[],"changed":{"id":51616,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-82m5-xm2h-g9v4","summary":"CGA-82m5-xm2h-g9v4","evidence":"osv:CGA-82m5-xm2h-g9v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-82m5-xm2h-g9v4","aliases":["CGA-82m5-xm2h-g9v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-82m5-xm2h-g9v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:12.929686124Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:88e10089-032d-4273-b6a3-a05acf58601e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-82m5-xm2h-g9v4","advisory_id":"88e10089-032d-4273-b6a3-a05acf58601e","event_types":["advisory"],"published_at":"2026-10-25T14:27:22.506225+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:07+00:00","detail_url":"/events/51616"},"members":[{"id":51616,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-82m5-xm2h-g9v4","summary":"CGA-82m5-xm2h-g9v4","evidence":"osv:CGA-82m5-xm2h-g9v4","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-82m5-xm2h-g9v4","aliases":["CGA-82m5-xm2h-g9v4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-82m5-xm2h-g9v4.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:01:12.929686124Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:88e10089-032d-4273-b6a3-a05acf58601e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-82m5-xm2h-g9v4","advisory_id":"88e10089-032d-4273-b6a3-a05acf58601e","event_types":["advisory"],"published_at":"2026-10-25T14:27:22.506225+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:07+00:00","detail_url":"/events/51616"}]}},{"id":51861,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c9rr-xmmp-2hw5","summary":"CGA-c9rr-xmmp-2hw5","evidence":"osv:CGA-c9rr-xmmp-2hw5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c9rr-xmmp-2hw5","aliases":["CGA-c9rr-xmmp-2hw5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c9rr-xmmp-2hw5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:00:51.634346152Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c9rr-xmmp-2hw5","advisory_id":"fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","event_types":["advisory"],"published_at":"2026-10-25T14:23:14.429129+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/advisories/advisory%3Afbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","group":{"id":"advisory:fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","revision":1,"primary_event_id":51389,"change":"published","superseded_by":[],"changed":{"id":51389,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c9rr-xmmp-2hw5","summary":"CGA-c9rr-xmmp-2hw5","evidence":"osv:CGA-c9rr-xmmp-2hw5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c9rr-xmmp-2hw5","aliases":["CGA-c9rr-xmmp-2hw5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c9rr-xmmp-2hw5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:00:51.634346152Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c9rr-xmmp-2hw5","advisory_id":"fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","event_types":["advisory"],"published_at":"2026-10-25T14:23:14.429129+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/events/51389"},"members":[{"id":51389,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c9rr-xmmp-2hw5","summary":"CGA-c9rr-xmmp-2hw5","evidence":"osv:CGA-c9rr-xmmp-2hw5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r1","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c9rr-xmmp-2hw5","aliases":["CGA-c9rr-xmmp-2hw5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r1"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c9rr-xmmp-2hw5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.5","component_type":"java-archive","component_version":"2.21.5","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.5.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-09-30T18:19:43Z"}]}}],"modified":"2026-09-30T23:00:51.634346152Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c9rr-xmmp-2hw5","advisory_id":"fbb2a8a2-a810-4dcc-84ea-4deb9b9eb20c","event_types":["advisory"],"published_at":"2026-10-25T14:23:14.429129+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T13:16:08+00:00","detail_url":"/events/51389"}]}},{"id":48153,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-rjrf-crc3-4326","summary":"MINI-rjrf-crc3-4326","evidence":"osv:MINI-rjrf-crc3-4326","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.30-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rjrf-crc3-4326","aliases":["MINI-rjrf-crc3-4326"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.30-r0"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/minimos/neo4j-5.26","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rjrf-crc3-4326.json"}}],"modified":"2026-09-30T18:24:31.143034558Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16817012-6de8-4c14-a361-21552ff444b1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rjrf-crc3-4326","advisory_id":"16817012-6de8-4c14-a361-21552ff444b1","event_types":["advisory"],"published_at":"2026-10-25T13:20:35.725358+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:39:17+00:00","detail_url":"/advisories/advisory%3A16817012-6de8-4c14-a361-21552ff444b1","group":{"id":"advisory:16817012-6de8-4c14-a361-21552ff444b1","revision":1,"primary_event_id":47681,"change":"published","superseded_by":[],"changed":{"id":47681,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-rjrf-crc3-4326","summary":"MINI-rjrf-crc3-4326","evidence":"osv:MINI-rjrf-crc3-4326","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.30-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rjrf-crc3-4326","aliases":["MINI-rjrf-crc3-4326"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.30-r0"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/minimos/neo4j-5.26","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rjrf-crc3-4326.json"}}],"modified":"2026-09-30T18:24:31.143034558Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16817012-6de8-4c14-a361-21552ff444b1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rjrf-crc3-4326","advisory_id":"16817012-6de8-4c14-a361-21552ff444b1","event_types":["advisory"],"published_at":"2026-10-25T13:20:35.725358+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:39:17+00:00","detail_url":"/events/47681"},"members":[{"id":47681,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-rjrf-crc3-4326","summary":"MINI-rjrf-crc3-4326","evidence":"osv:MINI-rjrf-crc3-4326","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.30-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-rjrf-crc3-4326","aliases":["MINI-rjrf-crc3-4326"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.30-r0"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/minimos/neo4j-5.26","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-rjrf-crc3-4326.json"}}],"modified":"2026-09-30T18:24:31.143034558Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16817012-6de8-4c14-a361-21552ff444b1","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-rjrf-crc3-4326","advisory_id":"16817012-6de8-4c14-a361-21552ff444b1","event_types":["advisory"],"published_at":"2026-10-25T13:20:35.725358+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:39:17+00:00","detail_url":"/events/47681"}]}},{"id":14072,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8hf5-65mr-w5p5","summary":"CGA-8hf5-65mr-w5p5","evidence":"osv:CGA-8hf5-65mr-w5p5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8hf5-65mr-w5p5","aliases":["CGA-8hf5-65mr-w5p5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8hf5-65mr-w5p5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:15:11.042744300Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8hf5-65mr-w5p5","advisory_id":"7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","event_types":["advisory"],"published_at":"2026-10-25T20:35:28.054836+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:20+00:00","detail_url":"/advisories/advisory%3A7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","group":{"id":"advisory:7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","revision":1,"primary_event_id":65422,"change":"published","superseded_by":[],"changed":{"id":65422,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8hf5-65mr-w5p5","summary":"CGA-8hf5-65mr-w5p5","evidence":"osv:CGA-8hf5-65mr-w5p5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8hf5-65mr-w5p5","aliases":["CGA-8hf5-65mr-w5p5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8hf5-65mr-w5p5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:15:11.042744300Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8hf5-65mr-w5p5","advisory_id":"7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","event_types":["advisory"],"published_at":"2026-10-25T20:35:28.054836+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:20+00:00","detail_url":"/events/65422"},"members":[{"id":65422,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-8hf5-65mr-w5p5","summary":"CGA-8hf5-65mr-w5p5","evidence":"osv:CGA-8hf5-65mr-w5p5","products":[{"name":{"value":"neo4j-5.26","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"5.26.31-r2","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-8hf5-65mr-w5p5","aliases":["CGA-8hf5-65mr-w5p5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.31-r2"}]}],"package":{"name":"neo4j-5.26","purl":"pkg:apk/chainguard/neo4j-5.26?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8hf5-65mr-w5p5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.21.6","component_type":"java-archive","component_version":"2.21.6","component_location":"/var/lib/neo4j/lib/jackson-databind-2.21.6.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:57:53Z"}]}}],"modified":"2026-10-02T05:15:11.042744300Z","provider":"osv","references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8hf5-65mr-w5p5","advisory_id":"7027d77a-96c2-4a4d-9530-9fa98d9ccf3f","event_types":["advisory"],"published_at":"2026-10-25T20:35:28.054836+00:00","technologies":["core-osv","neo4j-5-26"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T14:55:20+00:00","detail_url":"/events/65422"}]}}],"next_after":72569,"next_before":14072}