VDB
CVE-2026-59888
CVE-2026-59888
PUBLISHED
Jackson ist eine quelloffene Bibliothek zur JSON-Verarbeitung in Java.
EPSS 0.25% · 16.0th percentile
Risk Scores
EPSS Score
0.25%
16.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE | SUSE Linux | |
| FasterXML | FasterXML Jackson <2.21.4 | |
| FasterXML | FasterXML Jackson <2.18.8 | |
| FasterXML | FasterXML Jackson <3.1.4 | |
| SUSE | SUSE openSUSE |
Timeline
- Jul 14, 2026 Coalition ESS Score
- Jul 14, 2026 CVE Published
- Jul 15, 2026 CVE Updated
- Jul 24, 2026 Security Advisory
- Aug 7, 2026 EPSS Score
- Aug 12, 2026 Security Advisory
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2350.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2350 advisory
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5 advisory
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RO25JYPE2IWVEMG5UKDXKT3LJB6ZRGKJ/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-July/027929.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-July/027920.html advisory