Fedora 45 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-ddde3cf003)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-ddde3cf003 advisory. Rebase to 2.21.5 to solve the CVE-2026-54518, CVE-2026-54517, CVE-2026-54516, CVE-2026-54515, CVE-2026-54513, CVE-2026-54512 Tenable has extracted t...

SUSE SLED15: jackson-annotations / jackson-core / jackson-databind / etc (SUSE-SU-2026:2801-1)

"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2801-1 advisory. This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats- binary...

Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent fixes the following issues CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary...

SUSE-SU-2026:2801-1 Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base, jackson-parent fixes the following issues - CVE-2026-54512: jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3 <=1.0.5) +756 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (>=5.3.0 <=5.3.9)

org.springframework:spring-jms MAVEN version =5.3.0, =1.0.1, =1.0.3, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.3.0, =4.7.0 and more Source cves: CVE-2026-41855 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORK-17254113...

SUSE CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decodejson advances the input scalar's string pointer past the mark with SvPVset and restores it only on the normal return...

CVE-2026-9516

A flaw was found in Cpanel::JSON::XS, a Perl module used for processing JSON data. This vulnerability allows a remote attacker to cause a denial of service DoS by providing specially crafted input that begins with a UTF-8 Byte Order Mark BOM. When a decode filter callback encounters an error with...

UBUNTU-CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decodejson advances the input scalar's string pointer past the mark with SvPVset and restores it only on the normal return...

CVE-2026-9516 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decodejson advances the input scalar's string pointer past the mark with SvPVset and restores it only on the normal return...

CVE-2026-9516

CVE-2026-9516 affects Cpanel::JSON::XS for Perl prior to 4.41. A UTF-8 BOM prefixed input with a throwing decode filter callback can cause the decoder to skip restoration of the input pointer, leaving the scalar with an offset pointer. When the scalar is freed, the allocator may receive an invali...

CVE-2026-9516 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decodejson advances the input scalar's string pointer past the mark with SvPVset and restores it only on the normal return...

CVE-2026-9516

Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws. To skip a leading 3-byte UTF-8 BOM, decodejson advances the input scalar's string pointer past the mark with SvPVset and restores it only on the normal return...

Cpanel::JSON::XS 安全漏洞

Cpanel::JSON::XS is a tool developed by RURBAN personal developers that converts Perl data structures into JSON format. Versions of Cpanel::JSON::XS prior to version 4.41 contained security vulnerabilities. These vulnerabilities stemmed from exceptions thrown during the decoding filter callback,...

PT-2026-45892

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.41 Description An issue exists where providing input prefixed with a UTF-8 Byte Order Mark BOM can lead to a denial of service. When the decode json function processes a 3-byte UTF-8 BOM, it advances the...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, trufflehog, flux-source-controller, argo-workflows-fips, argo-workflows, trivy-operator, syft-fips, grype, flux-source-controller-fips, kaniko-fips, scorecard, flux, trivy-operator-fips, cloudbeat-fips, chainctl, k9s-fips, kubevela-fips, xeol-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: nfpm, grafana-alloy, osv-scanner, teleport, zarf, apko, gomplate, cerbos, pulumi-kubernetes-operator, pulumi-language-dotnet, zot, gitsign, argocd-image-updater, k9s, rancher-fleet, bom, gitlab-runner, argo-workflows, xeol, src-fingerprint, crossplane, steampipe,...