Security Bulletin: IBM Db2 Bridge is vulnerable due to Jackson-databind ( CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518)

Summary Jackson databind is used as part of IBM Db2 Bridge and it was affected by vulnerabilities described in the vulnerability details. This issue Affected users using Db2 Bridge 1.1.5 and new Fix pack was release to address the issue. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION:...

ROOT-APP-MAVEN-CVE-2026-54518 CVE-2026-54518 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2026-54518 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: keycloak, dependency-track-apiserver, sonarqube, geoserver, management-api-for-apache-cassandra-5.0, confluent-kafka, strimzi-kafka-operator-fips, jenkins-plugin-manager, ruby4.0-jrjackson, apache-hop-fips, kafka-fips, request-9047-keycloak-fips, pinot-fips, flyway,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, ruby3.3-jrjackson, apache-tika, druid, infinispan, ruby3.2-jrjackson, keycloak, thingsboard, jenkins, neo4j, spdx-tools-java, ruby3.4-jrjackson, solr, cassandra, confluent-kafka, management-api-for-apache-cassandra-5.0, apicurio-registry, kafk...