CLEANSTART-2026-GA94672 Security fixes in elasticsearch 9.4.4-r4

Package elasticsearch version 9.4.4-r4 fixes 38 vulnerabilities: CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-13506, CVE-2026-12816...

Security Bulletin: IBM Db2 Bridge is vulnerable due to Jackson-databind ( CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518)

Summary Jackson databind is used as part of IBM Db2 Bridge and it was affected by vulnerabilities described in the vulnerability details. This issue Affected users using Db2 Bridge 1.1.5 and new Fix pack was release to address the issue. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...

ROOT-APP-MAVEN-CVE-2026-54518 CVE-2026-54518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-AK34966 Security fixes in sonarqube 26.3.0.120487-r5

Package sonarqube version 26.3.0.120487-r5 fixes 2 vulnerabilities: CVE-2026-29062, CVE-2026-54518...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.

Summary jackson-databind-2.21.2.jar and jackson-databind-3.1.2.jar is used by IBM Sterling Connect:Direct Web Services CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 . Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-camel-karavan-devmode, opensearch, nacos-docker, spark-kubernetes-operator, cassandra, kafka-fips, neo4j, request-9047-keycloak-fips, apicurio-registry, spark-fips, druid, management-api-for-apache-cassandra-4.1, pinot-fips, kafbat-ui-fips,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: ruby3.4-jrjackson, ruby4.0-jrjackson, ruby3.2-jrjackson, akhq, ruby3.3-jrjackson, kafka, thingsboard, management-api-for-apache-cassandra-5.0, spdx-tools-java, nextflow, keycloak-config-cli, cassandra, confluent-kafka, jenkins-plugin-manager, dependency-track,...

CVE-2026-54518

creationtimestamp| type| source ---|---|--- 2026-06-24 00:02:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymgidgrg2f...

Linux Distros Unpatched Vulnerability : CVE-2026-54518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4,...