CLEANSTART-2026-GA94672 Security fixes in elasticsearch 9.4.4-r4

Package elasticsearch version 9.4.4-r4 fixes 38 vulnerabilities: CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-13506, CVE-2026-12816...

Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.

Summary jackson-databind-2.21.2.jar and jackson-databind-3.1.2.jar is used by IBM Sterling Connect:Direct Web Services CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518 . Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: opensearch, apache-tika, trino, kafka, druid, nextflow, dependency-track, infinispan, thingsboard, ruby4.0-jrjackson, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, ruby3.3-jrjackson, sonarqube, logstash, jenkins, ruby3.2-jrjackson, apicurio-registr...

ai.abkr.open:any (>=1.0.6 <=1.0.22), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +6910 more potentially affected by CVE-2026-54517 via tools.jackson.core:jackson-databind (>=3.0.0 <=3.1.3)

tools.jackson.core:jackson-databind MAVEN version =3.0.0, =1.0.6, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.1.2, =0.1.0, =0.1.0, =0.3.0 and more Source cves:...

CVE-2026-54517

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, in BeanDeserializer.deserializeUsingPropertyBased, the active-view @JsonView filter was applied only to creator properties; the regular...

CVE-2026-54517

Summary: CVE-2026-54517 affects jackson-databind. In BeanDeserializer._deserializeUsingPropertyBased, the active-view filter was only applied to creator properties; the path for regular properties lacked a visibleInView check. This allowed setterless Collection/Map properties annotated with a res...