pom.xml - Trivy Report - 2026-10-14 10:39:49.303052765 +0000 UTC m=+6.975582636

pom
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
com.fasterxml.jackson.core:jackson-databind	CVE-2026-68497	HIGH	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/errata/RHSA-2026:77648 https://access.redhat.com/errata/RHSA-2026:80504 https://access.redhat.com/security/cve/CVE-2026-68497 https://advisory.echohq.com/cve/CVE-2026-68497 https://bugzilla.redhat.com/2531964 https://bugzilla.redhat.com/show_bug.cgi?id=2531964 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68497 https://errata.almalinux.org/9/ALSA-2026-80504.html https://errata.rockylinux.org/RLSA-2026:77648 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd https://github.com/FasterXML/jackson-databind/pull/6127 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7 https://linux.oracle.com/cve/CVE-2026-68497.html https://linux.oracle.com/errata/ELSA-2026-80504.html https://nvd.nist.gov/vuln/detail/CVE-2026-68497 https://www.cve.org/CVERecord?id=CVE-2026-68497
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.22.1	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.22.1	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-83557	MEDIUM	2.22.1	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-83557 https://advisory.echohq.com/cve/CVE-2026-83557 https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f https://github.com/FasterXML/jackson-databind/issues/6156 https://github.com/FasterXML/jackson-databind/pull/6155 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j https://nvd.nist.gov/vuln/detail/CVE-2026-83557 https://www.cve.org/CVERecord?id=CVE-2026-83557
org.bouncycastle:bcprov-jdk18on	CVE-2026-8763	CRITICAL	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-8763 https://advisory.echohq.com/cve/CVE-2026-8763 https://github.com/advisories/GHSA-9pwp-9qqc-pr26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558 https://github.com/bcgit/bc-java/releases/tag/r1rv85v2 https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763 https://github.com/bcgit/bc-java/wiki/CVE-2026-8763 https://nvd.nist.gov/vuln/detail/CVE-2026-8763 https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on	CVE-2026-13506	HIGH	1.84	1.85	https://access.redhat.com/security/cve/CVE-2026-13506 https://advisory.echohq.com/cve/CVE-2026-13506 https://github.com/advisories/GHSA-qp49-qgx5-5m26 https://github.com/bcgit/bc-java https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84 https://github.com/bcgit/bc-java/wiki/CVE-2026-13506 https://nvd.nist.gov/vuln/detail/CVE-2026-13506 https://www.cve.org/CVERecord?id=CVE-2026-13506
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type	Misconf ID	Check	Severity	Message
Dockerfile Security Check	DS026	No HEALTHCHECK defined	LOW	Add HEALTHCHECK instruction in your Dockerfile https://avd.aquasec.com/misconfig/ds026