VDB
CVE-2026-59889
CVE-2026-59889
PUBLISHED
Jackson ist eine quelloffene Bibliothek zur JSON-Verarbeitung in Java.
EPSS 0.35% · 27.9th percentile
Risk Scores
EPSS Score
0.35%
27.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| FasterXML | FasterXML Jackson <3.2.1 | |
| FasterXML | FasterXML Jackson <2.18.8 | |
| SUSE | SUSE Linux | |
| FasterXML | FasterXML Jackson <3.1.5 | |
| FasterXML | FasterXML Jackson <2.21.4 | |
| FasterXML | FasterXML Jackson <3.1.4 | |
| FasterXML | FasterXML Jackson <2.22.1 | |
| FasterXML | FasterXML Jackson <2.21.5 | |
| FasterXML | FasterXML Jackson <2.18.9 | |
| SUSE | SUSE openSUSE |
Timeline
- Jul 14, 2026 CVE Published
- Jul 15, 2026 Coalition ESS Score
- Jul 16, 2026 Security Advisory
- Jul 25, 2026 EPSS Score
- Aug 8, 2026 EPSS Score
- Aug 12, 2026 Security Advisory
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 EPSS Score
- Aug 30, 2026 EPSS Score
- Sep 4, 2026 EPSS Score
- Sep 9, 2026 EPSS Score
- Sep 12, 2026 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2350.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2350 advisory
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5 advisory
- https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RO25JYPE2IWVEMG5UKDXKT3LJB6ZRGKJ/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-July/027929.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-July/027920.html advisory