CLSA-2026-1794372908

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794372908.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1794372908
Upstream
CVE (5)
Published
2026-11-11T05:55:09Z
Modified
2026-11-11T07:30:04Z
Summary
TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
Details

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.8.7-tuxcare.9.

Affected packages

TuxCare:Maven / com.fasterxml.jackson.core:jackson-databind

Package

Name
com.fasterxml.jackson.core:jackson-databind
Purl
pkg:maven/com.fasterxml.jackson.core/jackson-databind

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.8.7
Fixed
2.8.7-tuxcare.9

Affected versions

2.*
2.8.7
2.8.7-tuxcare.1
2.8.7-tuxcare.2
2.8.7-tuxcare.3
2.8.7-tuxcare.4
2.8.7-tuxcare.5
2.8.7-tuxcare.6
2.8.7-tuxcare.7
2.8.7-tuxcare.8

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794372908.json"
tuxcare 
{
    "base_version": "2.8.7",
    "fixed_version": "2.8.7-tuxcare.9"
}