{"schema_version":"2","view":"grouped","data":[{"id":70959,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-7mw5-pp2g-9m7q","summary":"CGA-7mw5-pp2g-9m7q","evidence":"osv:CGA-7mw5-pp2g-9m7q","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7mw5-pp2g-9m7q","aliases":["CGA-7mw5-pp2g-9m7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}}],"modified":"2026-10-02T18:28:03.859057187Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7mw5-pp2g-9m7q","advisory_id":"fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","event_types":["advisory"],"published_at":"2026-10-25T22:45:38.349953+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:11+00:00","detail_url":"/advisories/advisory%3Afd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","group":{"id":"advisory:fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","revision":1,"primary_event_id":71330,"change":"published","superseded_by":[],"changed":{"id":71330,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-7mw5-pp2g-9m7q","summary":"CGA-7mw5-pp2g-9m7q","evidence":"osv:CGA-7mw5-pp2g-9m7q","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7mw5-pp2g-9m7q","aliases":["CGA-7mw5-pp2g-9m7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}}],"modified":"2026-10-02T18:28:03.859057187Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7mw5-pp2g-9m7q","advisory_id":"fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","event_types":["advisory"],"published_at":"2026-10-25T22:45:38.349953+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:11+00:00","detail_url":"/events/71330"},"members":[{"id":71330,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-7mw5-pp2g-9m7q","summary":"CGA-7mw5-pp2g-9m7q","evidence":"osv:CGA-7mw5-pp2g-9m7q","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-7mw5-pp2g-9m7q","aliases":["CGA-7mw5-pp2g-9m7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-7mw5-pp2g-9m7q.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:29Z"}]}}],"modified":"2026-10-02T18:28:03.859057187Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-7mw5-pp2g-9m7q","advisory_id":"fd2c8392-6cd8-45d7-970c-d36fc1aa3aa3","event_types":["advisory"],"published_at":"2026-10-25T22:45:38.349953+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:11+00:00","detail_url":"/events/71330"}]}},{"id":67183,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-2974-vj66-xc3c","summary":"CGA-2974-vj66-xc3c","evidence":"osv:CGA-2974-vj66-xc3c","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2974-vj66-xc3c","aliases":["CGA-2974-vj66-xc3c"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}}],"modified":"2026-10-02T05:27:41.618498138Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c3118cb2-785f-4dfc-b4a9-359a7efa6efa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2974-vj66-xc3c","advisory_id":"c3118cb2-785f-4dfc-b4a9-359a7efa6efa","event_types":["advisory"],"published_at":"2026-10-25T21:11:59.69194+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/advisories/advisory%3Ac3118cb2-785f-4dfc-b4a9-359a7efa6efa","group":{"id":"advisory:c3118cb2-785f-4dfc-b4a9-359a7efa6efa","revision":1,"primary_event_id":67553,"change":"published","superseded_by":[],"changed":{"id":67553,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-2974-vj66-xc3c","summary":"CGA-2974-vj66-xc3c","evidence":"osv:CGA-2974-vj66-xc3c","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2974-vj66-xc3c","aliases":["CGA-2974-vj66-xc3c"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}}],"modified":"2026-10-02T05:27:41.618498138Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c3118cb2-785f-4dfc-b4a9-359a7efa6efa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2974-vj66-xc3c","advisory_id":"c3118cb2-785f-4dfc-b4a9-359a7efa6efa","event_types":["advisory"],"published_at":"2026-10-25T21:11:59.69194+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/events/67553"},"members":[{"id":67553,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-2974-vj66-xc3c","summary":"CGA-2974-vj66-xc3c","evidence":"osv:CGA-2974-vj66-xc3c","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-2974-vj66-xc3c","aliases":["CGA-2974-vj66-xc3c"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-2974-vj66-xc3c.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:32Z"}]}}],"modified":"2026-10-02T05:27:41.618498138Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c3118cb2-785f-4dfc-b4a9-359a7efa6efa","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-2974-vj66-xc3c","advisory_id":"c3118cb2-785f-4dfc-b4a9-359a7efa6efa","event_types":["advisory"],"published_at":"2026-10-25T21:11:59.69194+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/events/67553"}]}},{"id":67133,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-vqm3-4986-mmqx","summary":"CGA-vqm3-4986-mmqx","evidence":"osv:CGA-vqm3-4986-mmqx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vqm3-4986-mmqx","aliases":["CGA-vqm3-4986-mmqx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:40.007728821Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9be61f25-c577-44b6-af17-db2fba9b6986","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqm3-4986-mmqx","advisory_id":"9be61f25-c577-44b6-af17-db2fba9b6986","event_types":["advisory"],"published_at":"2026-10-25T21:10:53.835355+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/advisories/advisory%3A9be61f25-c577-44b6-af17-db2fba9b6986","group":{"id":"advisory:9be61f25-c577-44b6-af17-db2fba9b6986","revision":1,"primary_event_id":67503,"change":"published","superseded_by":[],"changed":{"id":67503,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-vqm3-4986-mmqx","summary":"CGA-vqm3-4986-mmqx","evidence":"osv:CGA-vqm3-4986-mmqx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vqm3-4986-mmqx","aliases":["CGA-vqm3-4986-mmqx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:40.007728821Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9be61f25-c577-44b6-af17-db2fba9b6986","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqm3-4986-mmqx","advisory_id":"9be61f25-c577-44b6-af17-db2fba9b6986","event_types":["advisory"],"published_at":"2026-10-25T21:10:53.835355+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/events/67503"},"members":[{"id":67503,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-vqm3-4986-mmqx","summary":"CGA-vqm3-4986-mmqx","evidence":"osv:CGA-vqm3-4986-mmqx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-vqm3-4986-mmqx","aliases":["CGA-vqm3-4986-mmqx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqm3-4986-mmqx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:40.007728821Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9be61f25-c577-44b6-af17-db2fba9b6986","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqm3-4986-mmqx","advisory_id":"9be61f25-c577-44b6-af17-db2fba9b6986","event_types":["advisory"],"published_at":"2026-10-25T21:10:53.835355+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:11+00:00","detail_url":"/events/67503"}]}},{"id":67127,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-x3w7-vf4v-7274","summary":"CGA-x3w7-vf4v-7274","evidence":"osv:CGA-x3w7-vf4v-7274","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x3w7-vf4v-7274","aliases":["CGA-x3w7-vf4v-7274"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:39.834447040Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0a5eede7-cddc-4f68-9283-85c003c477ab","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x3w7-vf4v-7274","advisory_id":"0a5eede7-cddc-4f68-9283-85c003c477ab","event_types":["advisory"],"published_at":"2026-10-25T21:10:47.496247+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/advisories/advisory%3A0a5eede7-cddc-4f68-9283-85c003c477ab","group":{"id":"advisory:0a5eede7-cddc-4f68-9283-85c003c477ab","revision":1,"primary_event_id":67497,"change":"published","superseded_by":[],"changed":{"id":67497,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-x3w7-vf4v-7274","summary":"CGA-x3w7-vf4v-7274","evidence":"osv:CGA-x3w7-vf4v-7274","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x3w7-vf4v-7274","aliases":["CGA-x3w7-vf4v-7274"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:39.834447040Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0a5eede7-cddc-4f68-9283-85c003c477ab","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x3w7-vf4v-7274","advisory_id":"0a5eede7-cddc-4f68-9283-85c003c477ab","event_types":["advisory"],"published_at":"2026-10-25T21:10:47.496247+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/events/67497"},"members":[{"id":67497,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-x3w7-vf4v-7274","summary":"CGA-x3w7-vf4v-7274","evidence":"osv:CGA-x3w7-vf4v-7274","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-x3w7-vf4v-7274","aliases":["CGA-x3w7-vf4v-7274"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-x3w7-vf4v-7274.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:39.834447040Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:0a5eede7-cddc-4f68-9283-85c003c477ab","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-x3w7-vf4v-7274","advisory_id":"0a5eede7-cddc-4f68-9283-85c003c477ab","event_types":["advisory"],"published_at":"2026-10-25T21:10:47.496247+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/events/67497"}]}},{"id":67095,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-g46f-7346-x936","summary":"CGA-g46f-7346-x936","evidence":"osv:CGA-g46f-7346-x936","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g46f-7346-x936","aliases":["CGA-g46f-7346-x936"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:38.871548491Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58764a0d-1723-4ebc-8b6e-2914db5159ef","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g46f-7346-x936","advisory_id":"58764a0d-1723-4ebc-8b6e-2914db5159ef","event_types":["advisory"],"published_at":"2026-10-25T21:10:08.41874+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/advisories/advisory%3A58764a0d-1723-4ebc-8b6e-2914db5159ef","group":{"id":"advisory:58764a0d-1723-4ebc-8b6e-2914db5159ef","revision":1,"primary_event_id":67465,"change":"published","superseded_by":[],"changed":{"id":67465,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-g46f-7346-x936","summary":"CGA-g46f-7346-x936","evidence":"osv:CGA-g46f-7346-x936","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g46f-7346-x936","aliases":["CGA-g46f-7346-x936"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:38.871548491Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58764a0d-1723-4ebc-8b6e-2914db5159ef","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g46f-7346-x936","advisory_id":"58764a0d-1723-4ebc-8b6e-2914db5159ef","event_types":["advisory"],"published_at":"2026-10-25T21:10:08.41874+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/events/67465"},"members":[{"id":67465,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-g46f-7346-x936","summary":"CGA-g46f-7346-x936","evidence":"osv:CGA-g46f-7346-x936","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-g46f-7346-x936","aliases":["CGA-g46f-7346-x936"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g46f-7346-x936.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:30Z"}]}}],"modified":"2026-10-02T05:27:38.871548491Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:58764a0d-1723-4ebc-8b6e-2914db5159ef","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g46f-7346-x936","advisory_id":"58764a0d-1723-4ebc-8b6e-2914db5159ef","event_types":["advisory"],"published_at":"2026-10-25T21:10:08.41874+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:12+00:00","detail_url":"/events/67465"}]}},{"id":67056,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-mwr4-8pj5-7745","summary":"CGA-mwr4-8pj5-7745","evidence":"osv:CGA-mwr4-8pj5-7745","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mwr4-8pj5-7745","aliases":["CGA-mwr4-8pj5-7745"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}}],"modified":"2026-10-02T05:27:37.593751604Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d456396-224b-4286-9cdd-fd52cfe2ef62","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mwr4-8pj5-7745","advisory_id":"9d456396-224b-4286-9cdd-fd52cfe2ef62","event_types":["advisory"],"published_at":"2026-10-25T21:09:26.253621+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:13+00:00","detail_url":"/advisories/advisory%3A9d456396-224b-4286-9cdd-fd52cfe2ef62","group":{"id":"advisory:9d456396-224b-4286-9cdd-fd52cfe2ef62","revision":1,"primary_event_id":67426,"change":"published","superseded_by":[],"changed":{"id":67426,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-mwr4-8pj5-7745","summary":"CGA-mwr4-8pj5-7745","evidence":"osv:CGA-mwr4-8pj5-7745","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mwr4-8pj5-7745","aliases":["CGA-mwr4-8pj5-7745"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}}],"modified":"2026-10-02T05:27:37.593751604Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d456396-224b-4286-9cdd-fd52cfe2ef62","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mwr4-8pj5-7745","advisory_id":"9d456396-224b-4286-9cdd-fd52cfe2ef62","event_types":["advisory"],"published_at":"2026-10-25T21:09:26.253621+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:13+00:00","detail_url":"/events/67426"},"members":[{"id":67426,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-mwr4-8pj5-7745","summary":"CGA-mwr4-8pj5-7745","evidence":"osv:CGA-mwr4-8pj5-7745","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-mwr4-8pj5-7745","aliases":["CGA-mwr4-8pj5-7745"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mwr4-8pj5-7745.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T02:01:31Z"}]}}],"modified":"2026-10-02T05:27:37.593751604Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9d456396-224b-4286-9cdd-fd52cfe2ef62","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mwr4-8pj5-7745","advisory_id":"9d456396-224b-4286-9cdd-fd52cfe2ef62","event_types":["advisory"],"published_at":"2026-10-25T21:09:26.253621+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T03:20:13+00:00","detail_url":"/events/67426"}]}},{"id":67033,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-gj54-rh7f-mmxh","summary":"CGA-gj54-rh7f-mmxh","evidence":"osv:CGA-gj54-rh7f-mmxh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj54-rh7f-mmxh","aliases":["CGA-gj54-rh7f-mmxh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:36.894252923Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:692a1284-0b06-4943-adbe-abeb24849f22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj54-rh7f-mmxh","advisory_id":"692a1284-0b06-4943-adbe-abeb24849f22","event_types":["advisory"],"published_at":"2026-10-25T21:09:05.329836+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/advisories/advisory%3A692a1284-0b06-4943-adbe-abeb24849f22","group":{"id":"advisory:692a1284-0b06-4943-adbe-abeb24849f22","revision":1,"primary_event_id":67403,"change":"published","superseded_by":[],"changed":{"id":67403,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-gj54-rh7f-mmxh","summary":"CGA-gj54-rh7f-mmxh","evidence":"osv:CGA-gj54-rh7f-mmxh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj54-rh7f-mmxh","aliases":["CGA-gj54-rh7f-mmxh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:36.894252923Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:692a1284-0b06-4943-adbe-abeb24849f22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj54-rh7f-mmxh","advisory_id":"692a1284-0b06-4943-adbe-abeb24849f22","event_types":["advisory"],"published_at":"2026-10-25T21:09:05.329836+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/events/67403"},"members":[{"id":67403,"cve_ids":["CVE-2026-91777"],"payload":{"kind":"advisory","title":"CGA-gj54-rh7f-mmxh","summary":"CGA-gj54-rh7f-mmxh","evidence":"osv:CGA-gj54-rh7f-mmxh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-gj54-rh7f-mmxh","aliases":["CGA-gj54-rh7f-mmxh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gj54-rh7f-mmxh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:36.894252923Z","provider":"osv","upstream":["CVE-2026-91777","GHSA-cxp5-3px4-pw24"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91777.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91777","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:692a1284-0b06-4943-adbe-abeb24849f22","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gj54-rh7f-mmxh","advisory_id":"692a1284-0b06-4943-adbe-abeb24849f22","event_types":["advisory"],"published_at":"2026-10-25T21:09:05.329836+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/events/67403"}]}},{"id":67003,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-3vrq-ffgj-6qvh","summary":"CGA-3vrq-ffgj-6qvh","evidence":"osv:CGA-3vrq-ffgj-6qvh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3vrq-ffgj-6qvh","aliases":["CGA-3vrq-ffgj-6qvh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:35.560626180Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fa68796d-9e51-4d74-be81-93d6908514f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3vrq-ffgj-6qvh","advisory_id":"fa68796d-9e51-4d74-be81-93d6908514f4","event_types":["advisory"],"published_at":"2026-10-25T21:08:31.788129+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/advisories/advisory%3Afa68796d-9e51-4d74-be81-93d6908514f4","group":{"id":"advisory:fa68796d-9e51-4d74-be81-93d6908514f4","revision":1,"primary_event_id":67373,"change":"published","superseded_by":[],"changed":{"id":67373,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-3vrq-ffgj-6qvh","summary":"CGA-3vrq-ffgj-6qvh","evidence":"osv:CGA-3vrq-ffgj-6qvh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3vrq-ffgj-6qvh","aliases":["CGA-3vrq-ffgj-6qvh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:35.560626180Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fa68796d-9e51-4d74-be81-93d6908514f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3vrq-ffgj-6qvh","advisory_id":"fa68796d-9e51-4d74-be81-93d6908514f4","event_types":["advisory"],"published_at":"2026-10-25T21:08:31.788129+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/events/67373"},"members":[{"id":67373,"cve_ids":["CVE-2026-91776"],"payload":{"kind":"advisory","title":"CGA-3vrq-ffgj-6qvh","summary":"CGA-3vrq-ffgj-6qvh","evidence":"osv:CGA-3vrq-ffgj-6qvh","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r9","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"high","structured":{"id":"CGA-3vrq-ffgj-6qvh","aliases":["CGA-3vrq-ffgj-6qvh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r9"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3vrq-ffgj-6qvh.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.2","component_type":"java-archive","component_version":"2.22.2","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.2.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-02T00:08:33Z"}]}}],"modified":"2026-10-02T05:27:35.560626180Z","provider":"osv","upstream":["CVE-2026-91776","GHSA-wv8q-qhhj-9h54"],"references":["https://repo1.maven.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91776.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind"]},"related_cves":[{"value":"CVE-2026-91776","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:fa68796d-9e51-4d74-be81-93d6908514f4","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3vrq-ffgj-6qvh","advisory_id":"fa68796d-9e51-4d74-be81-93d6908514f4","event_types":["advisory"],"published_at":"2026-10-25T21:08:31.788129+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T04:53:12+00:00","detail_url":"/events/67373"}]}},{"id":61497,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-q62g-xcr4-hmm5","summary":"CGA-q62g-xcr4-hmm5","evidence":"osv:CGA-q62g-xcr4-hmm5","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-q62g-xcr4-hmm5","aliases":["CGA-q62g-xcr4-hmm5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:47:18.119306677Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29bdea9f-fa00-4b42-b2c5-ef3892b72389","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q62g-xcr4-hmm5","advisory_id":"29bdea9f-fa00-4b42-b2c5-ef3892b72389","event_types":["advisory"],"published_at":"2026-10-25T18:50:51.619814+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3A29bdea9f-fa00-4b42-b2c5-ef3892b72389","group":{"id":"advisory:29bdea9f-fa00-4b42-b2c5-ef3892b72389","revision":1,"primary_event_id":60743,"change":"published","superseded_by":[],"changed":{"id":60743,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-q62g-xcr4-hmm5","summary":"CGA-q62g-xcr4-hmm5","evidence":"osv:CGA-q62g-xcr4-hmm5","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-q62g-xcr4-hmm5","aliases":["CGA-q62g-xcr4-hmm5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:47:18.119306677Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29bdea9f-fa00-4b42-b2c5-ef3892b72389","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q62g-xcr4-hmm5","advisory_id":"29bdea9f-fa00-4b42-b2c5-ef3892b72389","event_types":["advisory"],"published_at":"2026-10-25T18:50:51.619814+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60743"},"members":[{"id":60743,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-q62g-xcr4-hmm5","summary":"CGA-q62g-xcr4-hmm5","evidence":"osv:CGA-q62g-xcr4-hmm5","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-q62g-xcr4-hmm5","aliases":["CGA-q62g-xcr4-hmm5"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q62g-xcr4-hmm5.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:47:18.119306677Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:29bdea9f-fa00-4b42-b2c5-ef3892b72389","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q62g-xcr4-hmm5","advisory_id":"29bdea9f-fa00-4b42-b2c5-ef3892b72389","event_types":["advisory"],"published_at":"2026-10-25T18:50:51.619814+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60743"}]}},{"id":61492,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mw8g-fw95-jc66","summary":"CGA-mw8g-fw95-jc66","evidence":"osv:CGA-mw8g-fw95-jc66","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mw8g-fw95-jc66","aliases":["CGA-mw8g-fw95-jc66"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:47:17.361712079Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3007ab20-3c5f-434f-a150-13aa15c5c16f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw8g-fw95-jc66","advisory_id":"3007ab20-3c5f-434f-a150-13aa15c5c16f","event_types":["advisory"],"published_at":"2026-10-25T18:50:48.17787+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/advisories/advisory%3A3007ab20-3c5f-434f-a150-13aa15c5c16f","group":{"id":"advisory:3007ab20-3c5f-434f-a150-13aa15c5c16f","revision":1,"primary_event_id":60738,"change":"published","superseded_by":[],"changed":{"id":60738,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mw8g-fw95-jc66","summary":"CGA-mw8g-fw95-jc66","evidence":"osv:CGA-mw8g-fw95-jc66","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mw8g-fw95-jc66","aliases":["CGA-mw8g-fw95-jc66"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:47:17.361712079Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3007ab20-3c5f-434f-a150-13aa15c5c16f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw8g-fw95-jc66","advisory_id":"3007ab20-3c5f-434f-a150-13aa15c5c16f","event_types":["advisory"],"published_at":"2026-10-25T18:50:48.17787+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/events/60738"},"members":[{"id":60738,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mw8g-fw95-jc66","summary":"CGA-mw8g-fw95-jc66","evidence":"osv:CGA-mw8g-fw95-jc66","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mw8g-fw95-jc66","aliases":["CGA-mw8g-fw95-jc66"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mw8g-fw95-jc66.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:47:17.361712079Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3007ab20-3c5f-434f-a150-13aa15c5c16f","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mw8g-fw95-jc66","advisory_id":"3007ab20-3c5f-434f-a150-13aa15c5c16f","event_types":["advisory"],"published_at":"2026-10-25T18:50:48.17787+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/events/60738"}]}},{"id":61208,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmhv-7672-75q2","summary":"CGA-mmhv-7672-75q2","evidence":"osv:CGA-mmhv-7672-75q2","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmhv-7672-75q2","aliases":["CGA-mmhv-7672-75q2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:38.466472702Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:94c6cdef-4a12-4890-a53a-e158ee1dd970","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmhv-7672-75q2","advisory_id":"94c6cdef-4a12-4890-a53a-e158ee1dd970","event_types":["advisory"],"published_at":"2026-10-25T18:47:18.559138+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/advisories/advisory%3A94c6cdef-4a12-4890-a53a-e158ee1dd970","group":{"id":"advisory:94c6cdef-4a12-4890-a53a-e158ee1dd970","revision":1,"primary_event_id":60460,"change":"published","superseded_by":[],"changed":{"id":60460,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmhv-7672-75q2","summary":"CGA-mmhv-7672-75q2","evidence":"osv:CGA-mmhv-7672-75q2","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmhv-7672-75q2","aliases":["CGA-mmhv-7672-75q2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:38.466472702Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:94c6cdef-4a12-4890-a53a-e158ee1dd970","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmhv-7672-75q2","advisory_id":"94c6cdef-4a12-4890-a53a-e158ee1dd970","event_types":["advisory"],"published_at":"2026-10-25T18:47:18.559138+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/events/60460"},"members":[{"id":60460,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-mmhv-7672-75q2","summary":"CGA-mmhv-7672-75q2","evidence":"osv:CGA-mmhv-7672-75q2","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-mmhv-7672-75q2","aliases":["CGA-mmhv-7672-75q2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mmhv-7672-75q2.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:38.466472702Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:94c6cdef-4a12-4890-a53a-e158ee1dd970","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mmhv-7672-75q2","advisory_id":"94c6cdef-4a12-4890-a53a-e158ee1dd970","event_types":["advisory"],"published_at":"2026-10-25T18:47:18.559138+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/events/60460"}]}},{"id":61037,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrg6-pmh6-684h","summary":"CGA-jrg6-pmh6-684h","evidence":"osv:CGA-jrg6-pmh6-684h","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrg6-pmh6-684h","aliases":["CGA-jrg6-pmh6-684h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:16.703806584Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:deaa5603-a6b9-4a66-ab50-08567dc27ee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrg6-pmh6-684h","advisory_id":"deaa5603-a6b9-4a66-ab50-08567dc27ee2","event_types":["advisory"],"published_at":"2026-10-25T18:45:04.30543+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/advisories/advisory%3Adeaa5603-a6b9-4a66-ab50-08567dc27ee2","group":{"id":"advisory:deaa5603-a6b9-4a66-ab50-08567dc27ee2","revision":1,"primary_event_id":60291,"change":"published","superseded_by":[],"changed":{"id":60291,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrg6-pmh6-684h","summary":"CGA-jrg6-pmh6-684h","evidence":"osv:CGA-jrg6-pmh6-684h","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrg6-pmh6-684h","aliases":["CGA-jrg6-pmh6-684h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:16.703806584Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:deaa5603-a6b9-4a66-ab50-08567dc27ee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrg6-pmh6-684h","advisory_id":"deaa5603-a6b9-4a66-ab50-08567dc27ee2","event_types":["advisory"],"published_at":"2026-10-25T18:45:04.30543+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/events/60291"},"members":[{"id":60291,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-jrg6-pmh6-684h","summary":"CGA-jrg6-pmh6-684h","evidence":"osv:CGA-jrg6-pmh6-684h","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-jrg6-pmh6-684h","aliases":["CGA-jrg6-pmh6-684h"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jrg6-pmh6-684h.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:46:16.703806584Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:deaa5603-a6b9-4a66-ab50-08567dc27ee2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jrg6-pmh6-684h","advisory_id":"deaa5603-a6b9-4a66-ab50-08567dc27ee2","event_types":["advisory"],"published_at":"2026-10-25T18:45:04.30543+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:45+00:00","detail_url":"/events/60291"}]}},{"id":60977,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j287-mjxv-rwgx","summary":"CGA-j287-mjxv-rwgx","evidence":"osv:CGA-j287-mjxv-rwgx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j287-mjxv-rwgx","aliases":["CGA-j287-mjxv-rwgx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}}],"modified":"2026-10-01T10:46:09.036705170Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c304f159-cd5e-47b7-b70b-687d2756999e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j287-mjxv-rwgx","advisory_id":"c304f159-cd5e-47b7-b70b-687d2756999e","event_types":["advisory"],"published_at":"2026-10-25T18:44:17.146266+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3Ac304f159-cd5e-47b7-b70b-687d2756999e","group":{"id":"advisory:c304f159-cd5e-47b7-b70b-687d2756999e","revision":1,"primary_event_id":60233,"change":"published","superseded_by":[],"changed":{"id":60233,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j287-mjxv-rwgx","summary":"CGA-j287-mjxv-rwgx","evidence":"osv:CGA-j287-mjxv-rwgx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j287-mjxv-rwgx","aliases":["CGA-j287-mjxv-rwgx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}}],"modified":"2026-10-01T10:46:09.036705170Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c304f159-cd5e-47b7-b70b-687d2756999e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j287-mjxv-rwgx","advisory_id":"c304f159-cd5e-47b7-b70b-687d2756999e","event_types":["advisory"],"published_at":"2026-10-25T18:44:17.146266+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60233"},"members":[{"id":60233,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-j287-mjxv-rwgx","summary":"CGA-j287-mjxv-rwgx","evidence":"osv:CGA-j287-mjxv-rwgx","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-j287-mjxv-rwgx","aliases":["CGA-j287-mjxv-rwgx"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-j287-mjxv-rwgx.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:08Z"}]}}],"modified":"2026-10-01T10:46:09.036705170Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:c304f159-cd5e-47b7-b70b-687d2756999e","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-j287-mjxv-rwgx","advisory_id":"c304f159-cd5e-47b7-b70b-687d2756999e","event_types":["advisory"],"published_at":"2026-10-25T18:44:17.146266+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60233"}]}},{"id":60897,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c937-25q6-57q3","summary":"CGA-c937-25q6-57q3","evidence":"osv:CGA-c937-25q6-57q3","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c937-25q6-57q3","aliases":["CGA-c937-25q6-57q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:45:58.188544020Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2c8c4f0-d668-4faa-b9d7-900db0689d9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c937-25q6-57q3","advisory_id":"f2c8c4f0-d668-4faa-b9d7-900db0689d9d","event_types":["advisory"],"published_at":"2026-10-25T18:43:19.143717+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/advisories/advisory%3Af2c8c4f0-d668-4faa-b9d7-900db0689d9d","group":{"id":"advisory:f2c8c4f0-d668-4faa-b9d7-900db0689d9d","revision":1,"primary_event_id":60155,"change":"published","superseded_by":[],"changed":{"id":60155,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c937-25q6-57q3","summary":"CGA-c937-25q6-57q3","evidence":"osv:CGA-c937-25q6-57q3","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c937-25q6-57q3","aliases":["CGA-c937-25q6-57q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:45:58.188544020Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2c8c4f0-d668-4faa-b9d7-900db0689d9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c937-25q6-57q3","advisory_id":"f2c8c4f0-d668-4faa-b9d7-900db0689d9d","event_types":["advisory"],"published_at":"2026-10-25T18:43:19.143717+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/events/60155"},"members":[{"id":60155,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-c937-25q6-57q3","summary":"CGA-c937-25q6-57q3","evidence":"osv:CGA-c937-25q6-57q3","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-c937-25q6-57q3","aliases":["CGA-c937-25q6-57q3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c937-25q6-57q3.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:10Z"}]}}],"modified":"2026-10-01T10:45:58.188544020Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f2c8c4f0-d668-4faa-b9d7-900db0689d9d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c937-25q6-57q3","advisory_id":"f2c8c4f0-d668-4faa-b9d7-900db0689d9d","event_types":["advisory"],"published_at":"2026-10-25T18:43:19.143717+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:44+00:00","detail_url":"/events/60155"}]}},{"id":60809,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xfwf-42vj-p296","summary":"CGA-xfwf-42vj-p296","evidence":"osv:CGA-xfwf-42vj-p296","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xfwf-42vj-p296","aliases":["CGA-xfwf-42vj-p296"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:45:46.238963291Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xfwf-42vj-p296","advisory_id":"0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","event_types":["advisory"],"published_at":"2026-10-25T18:41:42.137725+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/advisories/advisory%3A0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","group":{"id":"advisory:0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","revision":1,"primary_event_id":60070,"change":"published","superseded_by":[],"changed":{"id":60070,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xfwf-42vj-p296","summary":"CGA-xfwf-42vj-p296","evidence":"osv:CGA-xfwf-42vj-p296","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xfwf-42vj-p296","aliases":["CGA-xfwf-42vj-p296"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:45:46.238963291Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xfwf-42vj-p296","advisory_id":"0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","event_types":["advisory"],"published_at":"2026-10-25T18:41:42.137725+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/events/60070"},"members":[{"id":60070,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xfwf-42vj-p296","summary":"CGA-xfwf-42vj-p296","evidence":"osv:CGA-xfwf-42vj-p296","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xfwf-42vj-p296","aliases":["CGA-xfwf-42vj-p296"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xfwf-42vj-p296.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:09Z"}]}}],"modified":"2026-10-01T10:45:46.238963291Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xfwf-42vj-p296","advisory_id":"0a6b71f4-4662-4a82-9f47-bcbaa8f4e8cf","event_types":["advisory"],"published_at":"2026-10-25T18:41:42.137725+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/events/60070"}]}},{"id":60808,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xf9j-qcx8-c493","summary":"CGA-xf9j-qcx8-c493","evidence":"osv:CGA-xf9j-qcx8-c493","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xf9j-qcx8-c493","aliases":["CGA-xf9j-qcx8-c493"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:45.757321302Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:48c21908-6faa-490c-a58e-28d60bb4a83d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xf9j-qcx8-c493","advisory_id":"48c21908-6faa-490c-a58e-28d60bb4a83d","event_types":["advisory"],"published_at":"2026-10-25T18:41:40.379637+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3A48c21908-6faa-490c-a58e-28d60bb4a83d","group":{"id":"advisory:48c21908-6faa-490c-a58e-28d60bb4a83d","revision":1,"primary_event_id":60069,"change":"published","superseded_by":[],"changed":{"id":60069,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xf9j-qcx8-c493","summary":"CGA-xf9j-qcx8-c493","evidence":"osv:CGA-xf9j-qcx8-c493","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xf9j-qcx8-c493","aliases":["CGA-xf9j-qcx8-c493"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:45.757321302Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:48c21908-6faa-490c-a58e-28d60bb4a83d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xf9j-qcx8-c493","advisory_id":"48c21908-6faa-490c-a58e-28d60bb4a83d","event_types":["advisory"],"published_at":"2026-10-25T18:41:40.379637+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60069"},"members":[{"id":60069,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-xf9j-qcx8-c493","summary":"CGA-xf9j-qcx8-c493","evidence":"osv:CGA-xf9j-qcx8-c493","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-xf9j-qcx8-c493","aliases":["CGA-xf9j-qcx8-c493"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-xf9j-qcx8-c493.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:45.757321302Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68497.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:48c21908-6faa-490c-a58e-28d60bb4a83d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-xf9j-qcx8-c493","advisory_id":"48c21908-6faa-490c-a58e-28d60bb4a83d","event_types":["advisory"],"published_at":"2026-10-25T18:41:40.379637+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/60069"}]}},{"id":60799,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vqf7-r8m9-h44x","summary":"CGA-vqf7-r8m9-h44x","evidence":"osv:CGA-vqf7-r8m9-h44x","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vqf7-r8m9-h44x","aliases":["CGA-vqf7-r8m9-h44x"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}}],"modified":"2026-10-01T10:45:44.802555878Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4fb6a42f-d078-4bd9-b01a-7803d4575bb2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqf7-r8m9-h44x","advisory_id":"4fb6a42f-d078-4bd9-b01a-7803d4575bb2","event_types":["advisory"],"published_at":"2026-10-25T18:41:22.132644+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/advisories/advisory%3A4fb6a42f-d078-4bd9-b01a-7803d4575bb2","group":{"id":"advisory:4fb6a42f-d078-4bd9-b01a-7803d4575bb2","revision":1,"primary_event_id":60060,"change":"published","superseded_by":[],"changed":{"id":60060,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vqf7-r8m9-h44x","summary":"CGA-vqf7-r8m9-h44x","evidence":"osv:CGA-vqf7-r8m9-h44x","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vqf7-r8m9-h44x","aliases":["CGA-vqf7-r8m9-h44x"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}}],"modified":"2026-10-01T10:45:44.802555878Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4fb6a42f-d078-4bd9-b01a-7803d4575bb2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqf7-r8m9-h44x","advisory_id":"4fb6a42f-d078-4bd9-b01a-7803d4575bb2","event_types":["advisory"],"published_at":"2026-10-25T18:41:22.132644+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/events/60060"},"members":[{"id":60060,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-vqf7-r8m9-h44x","summary":"CGA-vqf7-r8m9-h44x","evidence":"osv:CGA-vqf7-r8m9-h44x","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-vqf7-r8m9-h44x","aliases":["CGA-vqf7-r8m9-h44x"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vqf7-r8m9-h44x.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T04:53:08Z"}]}}],"modified":"2026-10-01T10:45:44.802555878Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4fb6a42f-d078-4bd9-b01a-7803d4575bb2","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vqf7-r8m9-h44x","advisory_id":"4fb6a42f-d078-4bd9-b01a-7803d4575bb2","event_types":["advisory"],"published_at":"2026-10-25T18:41:22.132644+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T14:37:43+00:00","detail_url":"/events/60060"}]}},{"id":60724,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-5cw8-99jc-9vcg","summary":"CGA-5cw8-99jc-9vcg","evidence":"osv:CGA-5cw8-99jc-9vcg","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5cw8-99jc-9vcg","aliases":["CGA-5cw8-99jc-9vcg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:34.249134850Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:772a6223-165b-4a25-b3ba-f7862ed182e3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cw8-99jc-9vcg","advisory_id":"772a6223-165b-4a25-b3ba-f7862ed182e3","event_types":["advisory"],"published_at":"2026-10-25T18:39:05.978607+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3A772a6223-165b-4a25-b3ba-f7862ed182e3","group":{"id":"advisory:772a6223-165b-4a25-b3ba-f7862ed182e3","revision":1,"primary_event_id":59985,"change":"published","superseded_by":[],"changed":{"id":59985,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-5cw8-99jc-9vcg","summary":"CGA-5cw8-99jc-9vcg","evidence":"osv:CGA-5cw8-99jc-9vcg","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5cw8-99jc-9vcg","aliases":["CGA-5cw8-99jc-9vcg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:34.249134850Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:772a6223-165b-4a25-b3ba-f7862ed182e3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cw8-99jc-9vcg","advisory_id":"772a6223-165b-4a25-b3ba-f7862ed182e3","event_types":["advisory"],"published_at":"2026-10-25T18:39:05.978607+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59985"},"members":[{"id":59985,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-5cw8-99jc-9vcg","summary":"CGA-5cw8-99jc-9vcg","evidence":"osv:CGA-5cw8-99jc-9vcg","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-5cw8-99jc-9vcg","aliases":["CGA-5cw8-99jc-9vcg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5cw8-99jc-9vcg.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:34.249134850Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:772a6223-165b-4a25-b3ba-f7862ed182e3","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5cw8-99jc-9vcg","advisory_id":"772a6223-165b-4a25-b3ba-f7862ed182e3","event_types":["advisory"],"published_at":"2026-10-25T18:39:05.978607+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59985"}]}},{"id":60613,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-29gj-m9p6-p7fj","summary":"CGA-29gj-m9p6-p7fj","evidence":"osv:CGA-29gj-m9p6-p7fj","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-29gj-m9p6-p7fj","aliases":["CGA-29gj-m9p6-p7fj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:45:18.620423245Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5765d6-e860-42f5-bce9-4441b68b2eb9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-29gj-m9p6-p7fj","advisory_id":"cb5765d6-e860-42f5-bce9-4441b68b2eb9","event_types":["advisory"],"published_at":"2026-10-25T18:36:58.120596+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3Acb5765d6-e860-42f5-bce9-4441b68b2eb9","group":{"id":"advisory:cb5765d6-e860-42f5-bce9-4441b68b2eb9","revision":1,"primary_event_id":59876,"change":"published","superseded_by":[],"changed":{"id":59876,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-29gj-m9p6-p7fj","summary":"CGA-29gj-m9p6-p7fj","evidence":"osv:CGA-29gj-m9p6-p7fj","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-29gj-m9p6-p7fj","aliases":["CGA-29gj-m9p6-p7fj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:45:18.620423245Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5765d6-e860-42f5-bce9-4441b68b2eb9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-29gj-m9p6-p7fj","advisory_id":"cb5765d6-e860-42f5-bce9-4441b68b2eb9","event_types":["advisory"],"published_at":"2026-10-25T18:36:58.120596+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59876"},"members":[{"id":59876,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-29gj-m9p6-p7fj","summary":"CGA-29gj-m9p6-p7fj","evidence":"osv:CGA-29gj-m9p6-p7fj","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-29gj-m9p6-p7fj","aliases":["CGA-29gj-m9p6-p7fj"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-29gj-m9p6-p7fj.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:09Z"}]}}],"modified":"2026-10-01T10:45:18.620423245Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19032.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5765d6-e860-42f5-bce9-4441b68b2eb9","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-29gj-m9p6-p7fj","advisory_id":"cb5765d6-e860-42f5-bce9-4441b68b2eb9","event_types":["advisory"],"published_at":"2026-10-25T18:36:58.120596+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59876"}]}},{"id":60569,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-g3qm-5w9j-7w8j","summary":"CGA-g3qm-5w9j-7w8j","evidence":"osv:CGA-g3qm-5w9j-7w8j","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-g3qm-5w9j-7w8j","aliases":["CGA-g3qm-5w9j-7w8j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:11.323098317Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30e2e582-9290-4059-9f61-ed4b29a9af0b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g3qm-5w9j-7w8j","advisory_id":"30e2e582-9290-4059-9f61-ed4b29a9af0b","event_types":["advisory"],"published_at":"2026-10-25T18:36:03.641136+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/advisories/advisory%3A30e2e582-9290-4059-9f61-ed4b29a9af0b","group":{"id":"advisory:30e2e582-9290-4059-9f61-ed4b29a9af0b","revision":1,"primary_event_id":59833,"change":"published","superseded_by":[],"changed":{"id":59833,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-g3qm-5w9j-7w8j","summary":"CGA-g3qm-5w9j-7w8j","evidence":"osv:CGA-g3qm-5w9j-7w8j","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-g3qm-5w9j-7w8j","aliases":["CGA-g3qm-5w9j-7w8j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:11.323098317Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30e2e582-9290-4059-9f61-ed4b29a9af0b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g3qm-5w9j-7w8j","advisory_id":"30e2e582-9290-4059-9f61-ed4b29a9af0b","event_types":["advisory"],"published_at":"2026-10-25T18:36:03.641136+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59833"},"members":[{"id":59833,"cve_ids":[],"payload":{"kind":"advisory","title":"CGA-g3qm-5w9j-7w8j","summary":"CGA-g3qm-5w9j-7w8j","evidence":"osv:CGA-g3qm-5w9j-7w8j","products":[{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r8","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CGA-g3qm-5w9j-7w8j","aliases":["CGA-g3qm-5w9j-7w8j"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/chainguard/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r8"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/wolfi/trino-plugin-lakehouse?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g3qm-5w9j-7w8j.json"},"ecosystem_specific":{"components":[{"component_name":"jackson-databind","component_purl":"pkg:maven/jackson-databind@2.22.1","component_type":"java-archive","component_version":"2.22.1","component_location":"/usr/lib/trino/lib/hdfs/com.fasterxml.jackson.core_jackson-databind-2.22.1.jar","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T03:20:10Z"}]}}],"modified":"2026-10-01T10:45:11.323098317Z","provider":"osv","references":["https://repo.maven.apache.org/maven2","https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/83xxx/CVE-2026-83557.json","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:30e2e582-9290-4059-9f61-ed4b29a9af0b","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g3qm-5w9j-7w8j","advisory_id":"30e2e582-9290-4059-9f61-ed4b29a9af0b","event_types":["advisory"],"published_at":"2026-10-25T18:36:03.641136+00:00","technologies":["core-osv","trino-plugin-lakehouse"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T12:37:05+00:00","detail_url":"/events/59833"}]}},{"id":48268,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-x6v3-h3gc-c39r","summary":"MINI-x6v3-h3gc-c39r","evidence":"osv:MINI-x6v3-h3gc-c39r","products":[{"name":{"value":"trino","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ai-functions","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-bigquery","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-blackhole","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-cassandra","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-clickhouse","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-delta-lake","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-druid","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-duckdb","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-elasticsearch","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exasol","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-filesystem","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-hdfs","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-faker","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-functions-python","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-geospatial","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-google-sheets","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hive","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-http-event-listener","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hudi","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-iceberg","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ignite","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-jmx","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka-event-listener","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ldap-group-provider","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-loki","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mariadb","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-memory","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ml","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mongodb","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql-event-listener","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opa","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-openlineage","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opensearch","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-oracle","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-password-authenticators","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-pinot","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/39/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-postgresql","evidence":"/affected/40/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/40/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-prometheus","evidence":"/affected/41/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/41/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ranger","evidence":"/affected/42/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/42/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redis","evidence":"/affected/43/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/43/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redshift","evidence":"/affected/44/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/44/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-resource-group-managers","evidence":"/affected/45/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/45/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-session-property-managers","evidence":"/affected/46/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/46/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-singlestore","evidence":"/affected/47/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/47/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-snowflake","evidence":"/affected/48/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/48/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-spooling-filesystem","evidence":"/affected/49/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/49/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-sqlserver","evidence":"/affected/50/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/50/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-thrift","evidence":"/affected/51/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/51/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpcds","evidence":"/affected/52/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/52/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpch","evidence":"/affected/53/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/53/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6v3-h3gc-c39r","aliases":["MINI-x6v3-h3gc-c39r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino","purl":"pkg:apk/minimos/trino","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ai-functions","purl":"pkg:apk/minimos/trino-plugin-ai-functions","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-bigquery","purl":"pkg:apk/minimos/trino-plugin-bigquery","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-blackhole","purl":"pkg:apk/minimos/trino-plugin-blackhole","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-cassandra","purl":"pkg:apk/minimos/trino-plugin-cassandra","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-clickhouse","purl":"pkg:apk/minimos/trino-plugin-clickhouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-delta-lake","purl":"pkg:apk/minimos/trino-plugin-delta-lake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-druid","purl":"pkg:apk/minimos/trino-plugin-druid","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-duckdb","purl":"pkg:apk/minimos/trino-plugin-duckdb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-elasticsearch","purl":"pkg:apk/minimos/trino-plugin-elasticsearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exasol","purl":"pkg:apk/minimos/trino-plugin-exasol","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-filesystem","purl":"pkg:apk/minimos/trino-plugin-exchange-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-hdfs","purl":"pkg:apk/minimos/trino-plugin-exchange-hdfs","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-faker","purl":"pkg:apk/minimos/trino-plugin-faker","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-functions-python","purl":"pkg:apk/minimos/trino-plugin-functions-python","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-geospatial","purl":"pkg:apk/minimos/trino-plugin-geospatial","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-google-sheets","purl":"pkg:apk/minimos/trino-plugin-google-sheets","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hive","purl":"pkg:apk/minimos/trino-plugin-hive","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-http-event-listener","purl":"pkg:apk/minimos/trino-plugin-http-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hudi","purl":"pkg:apk/minimos/trino-plugin-hudi","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-iceberg","purl":"pkg:apk/minimos/trino-plugin-iceberg","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ignite","purl":"pkg:apk/minimos/trino-plugin-ignite","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-jmx","purl":"pkg:apk/minimos/trino-plugin-jmx","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka","purl":"pkg:apk/minimos/trino-plugin-kafka","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka-event-listener","purl":"pkg:apk/minimos/trino-plugin-kafka-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/minimos/trino-plugin-lakehouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ldap-group-provider","purl":"pkg:apk/minimos/trino-plugin-ldap-group-provider","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-loki","purl":"pkg:apk/minimos/trino-plugin-loki","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mariadb","purl":"pkg:apk/minimos/trino-plugin-mariadb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-memory","purl":"pkg:apk/minimos/trino-plugin-memory","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ml","purl":"pkg:apk/minimos/trino-plugin-ml","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mongodb","purl":"pkg:apk/minimos/trino-plugin-mongodb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql","purl":"pkg:apk/minimos/trino-plugin-mysql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql-event-listener","purl":"pkg:apk/minimos/trino-plugin-mysql-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opa","purl":"pkg:apk/minimos/trino-plugin-opa","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-openlineage","purl":"pkg:apk/minimos/trino-plugin-openlineage","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opensearch","purl":"pkg:apk/minimos/trino-plugin-opensearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-oracle","purl":"pkg:apk/minimos/trino-plugin-oracle","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-password-authenticators","purl":"pkg:apk/minimos/trino-plugin-password-authenticators","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-pinot","purl":"pkg:apk/minimos/trino-plugin-pinot","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-postgresql","purl":"pkg:apk/minimos/trino-plugin-postgresql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-prometheus","purl":"pkg:apk/minimos/trino-plugin-prometheus","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ranger","purl":"pkg:apk/minimos/trino-plugin-ranger","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redis","purl":"pkg:apk/minimos/trino-plugin-redis","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redshift","purl":"pkg:apk/minimos/trino-plugin-redshift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-resource-group-managers","purl":"pkg:apk/minimos/trino-plugin-resource-group-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-session-property-managers","purl":"pkg:apk/minimos/trino-plugin-session-property-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-singlestore","purl":"pkg:apk/minimos/trino-plugin-singlestore","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-snowflake","purl":"pkg:apk/minimos/trino-plugin-snowflake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-spooling-filesystem","purl":"pkg:apk/minimos/trino-plugin-spooling-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-sqlserver","purl":"pkg:apk/minimos/trino-plugin-sqlserver","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-thrift","purl":"pkg:apk/minimos/trino-plugin-thrift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpcds","purl":"pkg:apk/minimos/trino-plugin-tpcds","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpch","purl":"pkg:apk/minimos/trino-plugin-tpch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}}],"modified":"2026-09-30T18:24:38.922162536Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42550f87-da40-40a3-a089-f24a866dd84d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6v3-h3gc-c39r","advisory_id":"42550f87-da40-40a3-a089-f24a866dd84d","event_types":["advisory"],"published_at":"2026-10-25T13:22:25.633911+00:00","technologies":["core-osv","trino","trino-plugin-ai-functions","trino-plugin-bigquery","trino-plugin-blackhole","trino-plugin-cassandra","trino-plugin-clickhouse","trino-plugin-delta-lake","trino-plugin-druid","trino-plugin-duckdb","trino-plugin-elasticsearch","trino-plugin-exasol","trino-plugin-exchange-filesystem","trino-plugin-exchange-hdfs","trino-plugin-faker","trino-plugin-functions-python","trino-plugin-geospatial","trino-plugin-google-sheets","trino-plugin-hive","trino-plugin-http-event-listener","trino-plugin-hudi","trino-plugin-iceberg","trino-plugin-ignite","trino-plugin-jmx","trino-plugin-kafka","trino-plugin-kafka-event-listener","trino-plugin-lakehouse","trino-plugin-ldap-group-provider","trino-plugin-loki","trino-plugin-mariadb","trino-plugin-memory","trino-plugin-ml","trino-plugin-mongodb","trino-plugin-mysql","trino-plugin-mysql-event-listener","trino-plugin-opa","trino-plugin-openlineage","trino-plugin-opensearch","trino-plugin-oracle","trino-plugin-password-authenticators","trino-plugin-pinot","trino-plugin-postgresql","trino-plugin-prometheus","trino-plugin-ranger","trino-plugin-redis","trino-plugin-redshift","trino-plugin-resource-group-managers","trino-plugin-session-property-managers","trino-plugin-singlestore","trino-plugin-snowflake","trino-plugin-spooling-filesystem","trino-plugin-sqlserver","trino-plugin-thrift","trino-plugin-tpcds","trino-plugin-tpch"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:40:21+00:00","detail_url":"/advisories/advisory%3A42550f87-da40-40a3-a089-f24a866dd84d","group":{"id":"advisory:42550f87-da40-40a3-a089-f24a866dd84d","revision":1,"primary_event_id":47796,"change":"published","superseded_by":[],"changed":{"id":47796,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-x6v3-h3gc-c39r","summary":"MINI-x6v3-h3gc-c39r","evidence":"osv:MINI-x6v3-h3gc-c39r","products":[{"name":{"value":"trino","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ai-functions","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-bigquery","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-blackhole","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-cassandra","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-clickhouse","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-delta-lake","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-druid","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-duckdb","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-elasticsearch","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exasol","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-filesystem","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-hdfs","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-faker","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-functions-python","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-geospatial","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-google-sheets","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hive","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-http-event-listener","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hudi","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-iceberg","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ignite","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-jmx","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka-event-listener","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ldap-group-provider","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-loki","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mariadb","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-memory","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ml","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mongodb","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql-event-listener","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opa","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-openlineage","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opensearch","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-oracle","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-password-authenticators","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-pinot","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/39/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-postgresql","evidence":"/affected/40/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/40/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-prometheus","evidence":"/affected/41/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/41/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ranger","evidence":"/affected/42/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/42/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redis","evidence":"/affected/43/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/43/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redshift","evidence":"/affected/44/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/44/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-resource-group-managers","evidence":"/affected/45/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/45/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-session-property-managers","evidence":"/affected/46/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/46/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-singlestore","evidence":"/affected/47/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/47/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-snowflake","evidence":"/affected/48/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/48/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-spooling-filesystem","evidence":"/affected/49/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/49/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-sqlserver","evidence":"/affected/50/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/50/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-thrift","evidence":"/affected/51/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/51/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpcds","evidence":"/affected/52/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/52/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpch","evidence":"/affected/53/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/53/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6v3-h3gc-c39r","aliases":["MINI-x6v3-h3gc-c39r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino","purl":"pkg:apk/minimos/trino","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ai-functions","purl":"pkg:apk/minimos/trino-plugin-ai-functions","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-bigquery","purl":"pkg:apk/minimos/trino-plugin-bigquery","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-blackhole","purl":"pkg:apk/minimos/trino-plugin-blackhole","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-cassandra","purl":"pkg:apk/minimos/trino-plugin-cassandra","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-clickhouse","purl":"pkg:apk/minimos/trino-plugin-clickhouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-delta-lake","purl":"pkg:apk/minimos/trino-plugin-delta-lake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-druid","purl":"pkg:apk/minimos/trino-plugin-druid","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-duckdb","purl":"pkg:apk/minimos/trino-plugin-duckdb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-elasticsearch","purl":"pkg:apk/minimos/trino-plugin-elasticsearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exasol","purl":"pkg:apk/minimos/trino-plugin-exasol","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-filesystem","purl":"pkg:apk/minimos/trino-plugin-exchange-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-hdfs","purl":"pkg:apk/minimos/trino-plugin-exchange-hdfs","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-faker","purl":"pkg:apk/minimos/trino-plugin-faker","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-functions-python","purl":"pkg:apk/minimos/trino-plugin-functions-python","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-geospatial","purl":"pkg:apk/minimos/trino-plugin-geospatial","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-google-sheets","purl":"pkg:apk/minimos/trino-plugin-google-sheets","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hive","purl":"pkg:apk/minimos/trino-plugin-hive","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-http-event-listener","purl":"pkg:apk/minimos/trino-plugin-http-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hudi","purl":"pkg:apk/minimos/trino-plugin-hudi","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-iceberg","purl":"pkg:apk/minimos/trino-plugin-iceberg","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ignite","purl":"pkg:apk/minimos/trino-plugin-ignite","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-jmx","purl":"pkg:apk/minimos/trino-plugin-jmx","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka","purl":"pkg:apk/minimos/trino-plugin-kafka","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka-event-listener","purl":"pkg:apk/minimos/trino-plugin-kafka-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/minimos/trino-plugin-lakehouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ldap-group-provider","purl":"pkg:apk/minimos/trino-plugin-ldap-group-provider","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-loki","purl":"pkg:apk/minimos/trino-plugin-loki","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mariadb","purl":"pkg:apk/minimos/trino-plugin-mariadb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-memory","purl":"pkg:apk/minimos/trino-plugin-memory","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ml","purl":"pkg:apk/minimos/trino-plugin-ml","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mongodb","purl":"pkg:apk/minimos/trino-plugin-mongodb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql","purl":"pkg:apk/minimos/trino-plugin-mysql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql-event-listener","purl":"pkg:apk/minimos/trino-plugin-mysql-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opa","purl":"pkg:apk/minimos/trino-plugin-opa","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-openlineage","purl":"pkg:apk/minimos/trino-plugin-openlineage","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opensearch","purl":"pkg:apk/minimos/trino-plugin-opensearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-oracle","purl":"pkg:apk/minimos/trino-plugin-oracle","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-password-authenticators","purl":"pkg:apk/minimos/trino-plugin-password-authenticators","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-pinot","purl":"pkg:apk/minimos/trino-plugin-pinot","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-postgresql","purl":"pkg:apk/minimos/trino-plugin-postgresql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-prometheus","purl":"pkg:apk/minimos/trino-plugin-prometheus","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ranger","purl":"pkg:apk/minimos/trino-plugin-ranger","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redis","purl":"pkg:apk/minimos/trino-plugin-redis","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redshift","purl":"pkg:apk/minimos/trino-plugin-redshift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-resource-group-managers","purl":"pkg:apk/minimos/trino-plugin-resource-group-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-session-property-managers","purl":"pkg:apk/minimos/trino-plugin-session-property-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-singlestore","purl":"pkg:apk/minimos/trino-plugin-singlestore","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-snowflake","purl":"pkg:apk/minimos/trino-plugin-snowflake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-spooling-filesystem","purl":"pkg:apk/minimos/trino-plugin-spooling-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-sqlserver","purl":"pkg:apk/minimos/trino-plugin-sqlserver","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-thrift","purl":"pkg:apk/minimos/trino-plugin-thrift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpcds","purl":"pkg:apk/minimos/trino-plugin-tpcds","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpch","purl":"pkg:apk/minimos/trino-plugin-tpch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}}],"modified":"2026-09-30T18:24:38.922162536Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42550f87-da40-40a3-a089-f24a866dd84d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6v3-h3gc-c39r","advisory_id":"42550f87-da40-40a3-a089-f24a866dd84d","event_types":["advisory"],"published_at":"2026-10-25T13:22:25.633911+00:00","technologies":["core-osv","trino","trino-plugin-ai-functions","trino-plugin-bigquery","trino-plugin-blackhole","trino-plugin-cassandra","trino-plugin-clickhouse","trino-plugin-delta-lake","trino-plugin-druid","trino-plugin-duckdb","trino-plugin-elasticsearch","trino-plugin-exasol","trino-plugin-exchange-filesystem","trino-plugin-exchange-hdfs","trino-plugin-faker","trino-plugin-functions-python","trino-plugin-geospatial","trino-plugin-google-sheets","trino-plugin-hive","trino-plugin-http-event-listener","trino-plugin-hudi","trino-plugin-iceberg","trino-plugin-ignite","trino-plugin-jmx","trino-plugin-kafka","trino-plugin-kafka-event-listener","trino-plugin-lakehouse","trino-plugin-ldap-group-provider","trino-plugin-loki","trino-plugin-mariadb","trino-plugin-memory","trino-plugin-ml","trino-plugin-mongodb","trino-plugin-mysql","trino-plugin-mysql-event-listener","trino-plugin-opa","trino-plugin-openlineage","trino-plugin-opensearch","trino-plugin-oracle","trino-plugin-password-authenticators","trino-plugin-pinot","trino-plugin-postgresql","trino-plugin-prometheus","trino-plugin-ranger","trino-plugin-redis","trino-plugin-redshift","trino-plugin-resource-group-managers","trino-plugin-session-property-managers","trino-plugin-singlestore","trino-plugin-snowflake","trino-plugin-spooling-filesystem","trino-plugin-sqlserver","trino-plugin-thrift","trino-plugin-tpcds","trino-plugin-tpch"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:40:21+00:00","detail_url":"/events/47796"},"members":[{"id":47796,"cve_ids":[],"payload":{"kind":"advisory","title":"MINI-x6v3-h3gc-c39r","summary":"MINI-x6v3-h3gc-c39r","evidence":"osv:MINI-x6v3-h3gc-c39r","products":[{"name":{"value":"trino","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ai-functions","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-bigquery","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-blackhole","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-cassandra","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-clickhouse","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-delta-lake","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-druid","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-duckdb","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-elasticsearch","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exasol","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-filesystem","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-exchange-hdfs","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-faker","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-functions-python","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-geospatial","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-google-sheets","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hive","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-http-event-listener","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-hudi","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-iceberg","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ignite","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-jmx","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-kafka-event-listener","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-lakehouse","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ldap-group-provider","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-loki","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mariadb","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-memory","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ml","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mongodb","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-mysql-event-listener","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opa","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-openlineage","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-opensearch","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-oracle","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-password-authenticators","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-pinot","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/39/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-postgresql","evidence":"/affected/40/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/40/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-prometheus","evidence":"/affected/41/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/41/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-ranger","evidence":"/affected/42/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/42/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redis","evidence":"/affected/43/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/43/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-redshift","evidence":"/affected/44/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/44/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-resource-group-managers","evidence":"/affected/45/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/45/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-session-property-managers","evidence":"/affected/46/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/46/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-singlestore","evidence":"/affected/47/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/47/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-snowflake","evidence":"/affected/48/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/48/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-spooling-filesystem","evidence":"/affected/49/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/49/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-sqlserver","evidence":"/affected/50/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/50/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-thrift","evidence":"/affected/51/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/51/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpcds","evidence":"/affected/52/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/52/ranges"}],"affected_versions":[]},{"name":{"value":"trino-plugin-tpch","evidence":"/affected/53/package/name"},"prerequisites":[],"fixed_versions":[{"value":"483-r0","evidence":"/affected/53/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"MINI-x6v3-h3gc-c39r","aliases":["MINI-x6v3-h3gc-c39r"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino","purl":"pkg:apk/minimos/trino","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ai-functions","purl":"pkg:apk/minimos/trino-plugin-ai-functions","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-bigquery","purl":"pkg:apk/minimos/trino-plugin-bigquery","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-blackhole","purl":"pkg:apk/minimos/trino-plugin-blackhole","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-cassandra","purl":"pkg:apk/minimos/trino-plugin-cassandra","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-clickhouse","purl":"pkg:apk/minimos/trino-plugin-clickhouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-delta-lake","purl":"pkg:apk/minimos/trino-plugin-delta-lake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-druid","purl":"pkg:apk/minimos/trino-plugin-druid","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-duckdb","purl":"pkg:apk/minimos/trino-plugin-duckdb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-elasticsearch","purl":"pkg:apk/minimos/trino-plugin-elasticsearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exasol","purl":"pkg:apk/minimos/trino-plugin-exasol","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-filesystem","purl":"pkg:apk/minimos/trino-plugin-exchange-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-exchange-hdfs","purl":"pkg:apk/minimos/trino-plugin-exchange-hdfs","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-faker","purl":"pkg:apk/minimos/trino-plugin-faker","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-functions-python","purl":"pkg:apk/minimos/trino-plugin-functions-python","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-geospatial","purl":"pkg:apk/minimos/trino-plugin-geospatial","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-google-sheets","purl":"pkg:apk/minimos/trino-plugin-google-sheets","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hive","purl":"pkg:apk/minimos/trino-plugin-hive","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-http-event-listener","purl":"pkg:apk/minimos/trino-plugin-http-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-hudi","purl":"pkg:apk/minimos/trino-plugin-hudi","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-iceberg","purl":"pkg:apk/minimos/trino-plugin-iceberg","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ignite","purl":"pkg:apk/minimos/trino-plugin-ignite","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-jmx","purl":"pkg:apk/minimos/trino-plugin-jmx","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka","purl":"pkg:apk/minimos/trino-plugin-kafka","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-kafka-event-listener","purl":"pkg:apk/minimos/trino-plugin-kafka-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-lakehouse","purl":"pkg:apk/minimos/trino-plugin-lakehouse","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ldap-group-provider","purl":"pkg:apk/minimos/trino-plugin-ldap-group-provider","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-loki","purl":"pkg:apk/minimos/trino-plugin-loki","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mariadb","purl":"pkg:apk/minimos/trino-plugin-mariadb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-memory","purl":"pkg:apk/minimos/trino-plugin-memory","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ml","purl":"pkg:apk/minimos/trino-plugin-ml","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mongodb","purl":"pkg:apk/minimos/trino-plugin-mongodb","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql","purl":"pkg:apk/minimos/trino-plugin-mysql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-mysql-event-listener","purl":"pkg:apk/minimos/trino-plugin-mysql-event-listener","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opa","purl":"pkg:apk/minimos/trino-plugin-opa","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-openlineage","purl":"pkg:apk/minimos/trino-plugin-openlineage","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-opensearch","purl":"pkg:apk/minimos/trino-plugin-opensearch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-oracle","purl":"pkg:apk/minimos/trino-plugin-oracle","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-password-authenticators","purl":"pkg:apk/minimos/trino-plugin-password-authenticators","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-pinot","purl":"pkg:apk/minimos/trino-plugin-pinot","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-postgresql","purl":"pkg:apk/minimos/trino-plugin-postgresql","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-prometheus","purl":"pkg:apk/minimos/trino-plugin-prometheus","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-ranger","purl":"pkg:apk/minimos/trino-plugin-ranger","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redis","purl":"pkg:apk/minimos/trino-plugin-redis","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-redshift","purl":"pkg:apk/minimos/trino-plugin-redshift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-resource-group-managers","purl":"pkg:apk/minimos/trino-plugin-resource-group-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-session-property-managers","purl":"pkg:apk/minimos/trino-plugin-session-property-managers","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-singlestore","purl":"pkg:apk/minimos/trino-plugin-singlestore","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-snowflake","purl":"pkg:apk/minimos/trino-plugin-snowflake","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-spooling-filesystem","purl":"pkg:apk/minimos/trino-plugin-spooling-filesystem","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-sqlserver","purl":"pkg:apk/minimos/trino-plugin-sqlserver","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-thrift","purl":"pkg:apk/minimos/trino-plugin-thrift","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpcds","purl":"pkg:apk/minimos/trino-plugin-tpcds","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"483-r0"}]}],"package":{"name":"trino-plugin-tpch","purl":"pkg:apk/minimos/trino-plugin-tpch","ecosystem":"MinimOS"},"database_specific":{"source":"https://packages.mini.dev/advisories/osv/MINI-x6v3-h3gc-c39r.json"}}],"modified":"2026-09-30T18:24:38.922162536Z","provider":"osv","references":[]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42550f87-da40-40a3-a089-f24a866dd84d","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/MINI-x6v3-h3gc-c39r","advisory_id":"42550f87-da40-40a3-a089-f24a866dd84d","event_types":["advisory"],"published_at":"2026-10-25T13:22:25.633911+00:00","technologies":["core-osv","trino","trino-plugin-ai-functions","trino-plugin-bigquery","trino-plugin-blackhole","trino-plugin-cassandra","trino-plugin-clickhouse","trino-plugin-delta-lake","trino-plugin-druid","trino-plugin-duckdb","trino-plugin-elasticsearch","trino-plugin-exasol","trino-plugin-exchange-filesystem","trino-plugin-exchange-hdfs","trino-plugin-faker","trino-plugin-functions-python","trino-plugin-geospatial","trino-plugin-google-sheets","trino-plugin-hive","trino-plugin-http-event-listener","trino-plugin-hudi","trino-plugin-iceberg","trino-plugin-ignite","trino-plugin-jmx","trino-plugin-kafka","trino-plugin-kafka-event-listener","trino-plugin-lakehouse","trino-plugin-ldap-group-provider","trino-plugin-loki","trino-plugin-mariadb","trino-plugin-memory","trino-plugin-ml","trino-plugin-mongodb","trino-plugin-mysql","trino-plugin-mysql-event-listener","trino-plugin-opa","trino-plugin-openlineage","trino-plugin-opensearch","trino-plugin-oracle","trino-plugin-password-authenticators","trino-plugin-pinot","trino-plugin-postgresql","trino-plugin-prometheus","trino-plugin-ranger","trino-plugin-redis","trino-plugin-redshift","trino-plugin-resource-group-managers","trino-plugin-session-property-managers","trino-plugin-singlestore","trino-plugin-snowflake","trino-plugin-spooling-filesystem","trino-plugin-sqlserver","trino-plugin-thrift","trino-plugin-tpcds","trino-plugin-tpch"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T20:40:21+00:00","detail_url":"/events/47796"}]}}],"next_after":70959,"next_before":48268}