pom.xml - Trivy Report - 2026-10-06 16:22:53.762629686 +0000 UTC m=+5.493467423

pom
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
com.fasterxml.jackson.core:jackson-databind	CVE-2026-68497	HIGH	2.18.9	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-68497 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd https://github.com/FasterXML/jackson-databind/pull/6127 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7 https://nvd.nist.gov/vuln/detail/CVE-2026-68497 https://www.cve.org/CVERecord?id=CVE-2026-68497
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.18.9	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.18.9	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91777 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.18.9	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-83557	MEDIUM	2.18.9	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-83557 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f https://github.com/FasterXML/jackson-databind/issues/6156 https://github.com/FasterXML/jackson-databind/pull/6155 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j https://nvd.nist.gov/vuln/detail/CVE-2026-83557 https://www.cve.org/CVERecord?id=CVE-2026-83557
net.sf.jasperreports:jasperreports	CVE-2025-10492	HIGH	6.21.5	7.0.4	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/ https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition https://github.com/Jaspersoft/jasperreports https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647 https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569 https://github.com/Jaspersoft/jasperreports/issues/542 https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports	CVE-2026-6009	HIGH	6.21.5	7.0.7	https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/ https://github.com/Jaspersoft/jasperreports https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.bouncycastle:bcprov-jdk18on	CVE-2026-8763	CRITICAL	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-8763 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558 https://github.com/bcgit/bc-java/releases/tag/r1rv85v2 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763 https://github.com/bcgit/bc-java/wiki/CVE-2026-8763 https://nvd.nist.gov/vuln/detail/CVE-2026-8763 https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on	CVE-2026-13506	HIGH	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-13506 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 https://github.com/bcgit/bc-java/wiki/CVE-2026-13506 https://nvd.nist.gov/vuln/detail/CVE-2026-13506 https://www.cve.org/CVERecord?id=CVE-2026-13506
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type	Misconf ID	Check	Severity	Message
Dockerfile Security Check	DS026	No HEALTHCHECK defined	LOW	Add HEALTHCHECK instruction in your Dockerfile https://avd.aquasec.com/misconfig/ds026