Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:93444
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:93444
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:93444.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:93444
Upstream
CVE (2)
CVE-2026-68497
CVE-2026-91777
Published
2026-11-13T18:48:58Z
Modified
2026-11-13T19:04:02Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
Details
References
https://access.redhat.com/errata/RHSA-2026:93444
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2531964
https://bugzilla.redhat.com/show_bug.cgi?id=2539085
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93444.json
https://access.redhat.com/security/cve/CVE-2026-68497
https://www.cve.org/CVERecord?id=CVE-2026-68497
https://nvd.nist.gov/vuln/detail/CVE-2026-68497
https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd
https://github.com/FasterXML/jackson-databind/pull/6127
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7
https://access.redhat.com/security/cve/CVE-2026-91777
https://www.cve.org/CVERecord?id=CVE-2026-91777
https://nvd.nist.gov/vuln/detail/CVE-2026-91777
https://github.com/FasterXML/jackson-databind/issues/6204
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
Affected packages
Red Hat:rhel_e4s:9.4::appstream
jackson-annotations
Package
Name
jackson-annotations
Purl
pkg:rpm/redhat/jackson-annotations
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21-1.el9_4.1
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
jackson-core
Package
Name
jackson-core
Purl
pkg:rpm/redhat/jackson-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
jackson-databind
Package
Name
jackson-databind
Purl
pkg:rpm/redhat/jackson-databind
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4.1
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
jackson-jaxrs-providers
Package
Name
jackson-jaxrs-providers
Purl
pkg:rpm/redhat/jackson-jaxrs-providers
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
jackson-modules-base
Package
Name
jackson-modules-base
Purl
pkg:rpm/redhat/jackson-modules-base
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-annotations
Package
Name
pki-jackson-annotations
Purl
pkg:rpm/redhat/pki-jackson-annotations
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21-1.el9_4.1
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-core
Package
Name
pki-jackson-core
Purl
pkg:rpm/redhat/pki-jackson-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-databind
Package
Name
pki-jackson-databind
Purl
pkg:rpm/redhat/pki-jackson-databind
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4.1
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-jaxrs-json-provider
Package
Name
pki-jackson-jaxrs-json-provider
Purl
pkg:rpm/redhat/pki-jackson-jaxrs-json-provider
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-jaxrs-providers
Package
Name
pki-jackson-jaxrs-providers
Purl
pkg:rpm/redhat/pki-jackson-jaxrs-providers
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
pki-jackson-module-jaxb-annotations
Package
Name
pki-jackson-module-jaxb-annotations
Purl
pkg:rpm/redhat/pki-jackson-module-jaxb-annotations
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.21.6-1.el9_4
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:93444.json"
RHSA-2026:93444 - OSV