sz-portal-main-bff.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-10-14 10:39:41.952586834 +0000 UTC m=+2.341476331

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
com.fasterxml.jackson.core:jackson-core	CVE-2026-89407	HIGH	2.22.1	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-89407 https://advisory.echohq.com/cve/CVE-2026-89407 https://getsafety.com/vulnerabilities/SFTY-20260922-89449/CVE-2026-89407 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff https://github.com/FasterXML/jackson-core/issues/1649 https://github.com/FasterXML/jackson-core/pull/1650 https://github.com/FasterXML/jackson-core/pull/1701 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89 https://nvd.nist.gov/vuln/detail/CVE-2026-89407 https://www.cve.org/CVERecord?id=CVE-2026-89407
com.fasterxml.jackson.core:jackson-core	CVE-2026-89425	HIGH	2.22.1	2.21.7, 2.22.3, 2.18.11	https://access.redhat.com/security/cve/CVE-2026-89425 https://advisory.echohq.com/cve/CVE-2026-89425 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3 https://github.com/FasterXML/jackson-core/pull/1698 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf https://nvd.nist.gov/vuln/detail/CVE-2026-89425 https://www.cve.org/CVERecord?id=CVE-2026-89425
com.fasterxml.jackson.core:jackson-databind	CVE-2026-68497	HIGH	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/errata/RHSA-2026:77648 https://access.redhat.com/errata/RHSA-2026:80504 https://access.redhat.com/security/cve/CVE-2026-68497 https://advisory.echohq.com/cve/CVE-2026-68497 https://bugzilla.redhat.com/2531964 https://bugzilla.redhat.com/show_bug.cgi?id=2531964 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68497 https://errata.almalinux.org/9/ALSA-2026-80504.html https://errata.rockylinux.org/RLSA-2026:77648 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd https://github.com/FasterXML/jackson-databind/pull/6127 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7 https://linux.oracle.com/cve/CVE-2026-68497.html https://linux.oracle.com/errata/ELSA-2026-80504.html https://nvd.nist.gov/vuln/detail/CVE-2026-68497 https://www.cve.org/CVERecord?id=CVE-2026-68497
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.22.1	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.22.1	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-83557	MEDIUM	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-83557 https://advisory.echohq.com/cve/CVE-2026-83557 https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f https://github.com/FasterXML/jackson-databind/issues/6156 https://github.com/FasterXML/jackson-databind/pull/6155 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j https://nvd.nist.gov/vuln/detail/CVE-2026-83557 https://www.cve.org/CVERecord?id=CVE-2026-83557
org.bouncycastle:bcprov-jdk18on	CVE-2026-8763	CRITICAL	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-8763 https://advisory.echohq.com/cve/CVE-2026-8763 https://github.com/advisories/GHSA-9pwp-9qqc-pr26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558 https://github.com/bcgit/bc-java/releases/tag/r1rv85v2 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763 https://github.com/bcgit/bc-java/wiki/CVE-2026-8763 https://nvd.nist.gov/vuln/detail/CVE-2026-8763 https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on	CVE-2026-13506	HIGH	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-13506 https://advisory.echohq.com/cve/CVE-2026-13506 https://github.com/advisories/GHSA-qp49-qgx5-5m26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 https://github.com/bcgit/bc-java/wiki/CVE-2026-13506 https://nvd.nist.gov/vuln/detail/CVE-2026-13506 https://www.cve.org/CVERecord?id=CVE-2026-13506
org.springframework:spring-webflux	CVE-2026-47890	CRITICAL	6.2.19	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47890 https://advisory.echohq.com/cve/CVE-2026-47890 https://github.com/advisories/GHSA-j9f9-w8pj-32f8 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-47890 https://spring.io/security/cve-2026-47890 https://www.cve.org/CVERecord?id=CVE-2026-47890
org.springframework:spring-webflux	CVE-2026-47892	CRITICAL	6.2.19	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47892 https://advisory.echohq.com/cve/CVE-2026-47892 https://getsafety.com/vulnerabilities/SFTY-20260827-26369/CVE-2026-47892 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-47892 https://spring.io/security/cve-2026-47892 https://www.cve.org/CVERecord?id=CVE-2026-47892
No Misconfigurations found