This is an automated email from the ASF dual-hosted git repository.
github-actions[bot] pushed a commit to branch asf-staging
in repository https://gitbox.apache.org/repos/asf/solr-site.git
The following commit(s) were added to refs/heads/asf-staging by this push:
new 33eadfb82 Commit build products
33eadfb82 is described below
commit 33eadfb82904f6abd5327cd03659895b9db1d51a
Author: Build Pelican (action) <[email protected]>
AuthorDate: Thu Aug 13 11:31:31 2026 +0000
Commit build products
---
output/feeds/all.atom.xml | 5 +-
output/feeds/solr/vex.atom.xml | 5 +-
output/security-dependency-cves.html | 2 +-
output/solr.openvex.json | 78 ++++++++-
output/solr.vex.json | 325 ++++++++++++++++++-----------------
output/vex.html | 9 +-
6 files changed, 255 insertions(+), 169 deletions(-)
diff --git a/output/feeds/all.atom.xml b/output/feeds/all.atom.xml
index e43507cae..007b9adfd 100644
--- a/output/feeds/all.atom.xml
+++ b/output/feeds/all.atom.xml
@@ -131,8 +131,9 @@ never reached.</p></content><category
term="solr/vex"/></entry><entry><tit
<li><strong>Require Jackson features Solr does not
use.</strong> CVE-2026-54515 (case-insensitive deserialization
bypassing per-property <code>@JsonIgnoreProperties</code>),
CVE-2026-59889 (<code>@JsonView</code> bypass for
<code>@JsonUnwrapped</code> container properties),
CVE-2026-59888 (<code>@JsonIgnore</code> on a Record property
bypassed
- via a <code>PropertyNamingStrategy</code>), and
GHSA-mhm7-754m-9p8w (<code>@JsonView</code> bypass for creator
properties
- with <code>@JsonTypeInfo(include = As.EXTERNAL_PROPERTY)</code>)
can reach Solr's own jackson-databind, but
+ via a <code>PropertyNamingStrategy</code>), GHSA-mhm7-754m-9p8w
(<code>@JsonView</code> bypass for creator properties
+ with <code>@JsonTypeInfo(include =
As.EXTERNAL_PROPERTY)</code>), and CVE-2026-54518
(<code>@JsonView</code> bypass for
+ unwrapped creator parameters) can reach Solr's own jackson-databind, but
only when an application relies on those annotation-based mechanisms —
case-insensitive property
mapping, <code>@JsonView</code>,
<code>@JsonUnwrapped</code>, <code>@JsonIgnore</code>
on records, or <code>@JsonTypeInfo</code> external-property
polymorphism — to restrict which fields untrusted input may set. Solr uses
none of them: it maps
diff --git a/output/feeds/solr/vex.atom.xml b/output/feeds/solr/vex.atom.xml
index 9c035b832..03517f39c 100644
--- a/output/feeds/solr/vex.atom.xml
+++ b/output/feeds/solr/vex.atom.xml
@@ -131,8 +131,9 @@ never reached.</p></content><category
term="solr/vex"/></entry><entry><tit
<li><strong>Require Jackson features Solr does not
use.</strong> CVE-2026-54515 (case-insensitive deserialization
bypassing per-property <code>@JsonIgnoreProperties</code>),
CVE-2026-59889 (<code>@JsonView</code> bypass for
<code>@JsonUnwrapped</code> container properties),
CVE-2026-59888 (<code>@JsonIgnore</code> on a Record property
bypassed
- via a <code>PropertyNamingStrategy</code>), and
GHSA-mhm7-754m-9p8w (<code>@JsonView</code> bypass for creator
properties
- with <code>@JsonTypeInfo(include = As.EXTERNAL_PROPERTY)</code>)
can reach Solr's own jackson-databind, but
+ via a <code>PropertyNamingStrategy</code>), GHSA-mhm7-754m-9p8w
(<code>@JsonView</code> bypass for creator properties
+ with <code>@JsonTypeInfo(include =
As.EXTERNAL_PROPERTY)</code>), and CVE-2026-54518
(<code>@JsonView</code> bypass for
+ unwrapped creator parameters) can reach Solr's own jackson-databind, but
only when an application relies on those annotation-based mechanisms —
case-insensitive property
mapping, <code>@JsonView</code>,
<code>@JsonUnwrapped</code>, <code>@JsonIgnore</code>
on records, or <code>@JsonTypeInfo</code> external-property
polymorphism — to restrict which fields untrusted input may set. Solr uses
none of them: it maps
diff --git a/output/security-dependency-cves.html
b/output/security-dependency-cves.html
index b55f42b9a..072e5c242 100644
--- a/output/security-dependency-cves.html
+++ b/output/security-dependency-cves.html
@@ -254,7 +254,7 @@ or contact <a
href="mailto:[email protected]";>[email protected]</a>.</p>
</tr>
<tr>
<td>
-<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>,
<a
href="https://github.com/advisories/GHSA-mhm7-754m-9p8w";>GHSA-mhm7-754m-9p8w</a>
</td>
+<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>,
<a href="https://nvd.nist.gov/vuln/detail/CVE-2026-54518";>CVE-2026-54518</a>,
<a href="https://github. [...]
<td>4.7.0-10.0.0</td>
<td>
jackson-databind-2.12.7.1.jar </td>
diff --git a/output/solr.openvex.json b/output/solr.openvex.json
index b4ae87877..fc4b7652b 100644
--- a/output/solr.openvex.json
+++ b/output/solr.openvex.json
@@ -3273,7 +3273,7 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
@@ -3339,7 +3339,7 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
@@ -3405,7 +3405,7 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
@@ -3471,7 +3471,7 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
@@ -3537,7 +3537,73 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
+ },
+ {
+ "vulnerability": {
+ "name": "CVE-2026-54518"
+ },
+ "products": [
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id":
"pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id":
"pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id": "pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ },
+ {
+ "@id":
"pkg:maven/com.fasterxml.jackson.core/[email protected]"
+ }
+ ],
+ "status": "not_affected",
+ "timestamp": "2026-07-31T00:00:00Z",
+ "justification": "vulnerable_code_not_in_execute_path",
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
@@ -3603,7 +3669,7 @@
"status": "not_affected",
"timestamp": "2026-07-31T00:00:00Z",
"justification": "vulnerable_code_not_in_execute_path",
- "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
+ "impact_statement": "Four jackson-databind issues, in two groups:\n\n*
**Only the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow
on `toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and
CVE-2026-54514 (eager DNS resolution / SSRF when\n deserializing into
`InetSocketAddress`, fixed 2.18.8 / 2.21.4) do not affect Solr's own\n
jackson-databind (2.18.0 in current 9.x, 2.22.0 in 9.11 \u2014 both patched).
The `2.12.7.1` a scanner\n flags is Hadoop's s [...]
"status_notes": "Affected Apache Solr versions: 4.7.0-10.0.0."
},
{
diff --git a/output/solr.vex.json b/output/solr.vex.json
index 54be4fe43..d5334f7e5 100644
--- a/output/solr.vex.json
+++ b/output/solr.vex.json
@@ -7,7 +7,7 @@
"name": "solr",
"version": "SNAPSHOT",
"type": "application",
- "bom-ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "bom-ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
},
"vulnerabilities": [
@@ -23,7 +23,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -39,7 +39,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -55,7 +55,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -71,7 +71,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -87,7 +87,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -103,7 +103,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -119,7 +119,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -135,7 +135,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -151,7 +151,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -167,7 +167,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -183,7 +183,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -199,7 +199,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -215,7 +215,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -231,7 +231,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -247,7 +247,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -263,7 +263,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -279,7 +279,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -295,7 +295,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -311,7 +311,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -327,7 +327,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -343,7 +343,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -359,7 +359,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -375,7 +375,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -391,7 +391,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -407,7 +407,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -423,7 +423,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -439,7 +439,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -455,7 +455,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -471,7 +471,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -487,7 +487,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -503,7 +503,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -519,7 +519,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -535,7 +535,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -551,7 +551,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -567,7 +567,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -583,7 +583,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -599,7 +599,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -615,7 +615,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -631,7 +631,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -647,7 +647,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -663,7 +663,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -679,7 +679,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -695,7 +695,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -711,7 +711,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -727,7 +727,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -743,7 +743,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -759,7 +759,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -775,7 +775,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -791,7 +791,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -807,7 +807,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -823,7 +823,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -839,7 +839,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -855,7 +855,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -871,7 +871,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -887,7 +887,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -903,7 +903,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -919,7 +919,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -935,7 +935,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -951,7 +951,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -970,7 +970,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -986,7 +986,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1002,7 +1002,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1018,7 +1018,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1037,7 +1037,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1053,7 +1053,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1070,7 +1070,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1087,7 +1087,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1104,7 +1104,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1121,7 +1121,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1138,7 +1138,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1155,7 +1155,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1172,7 +1172,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1189,7 +1189,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1206,7 +1206,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1223,7 +1223,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1240,7 +1240,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1257,7 +1257,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1274,7 +1274,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1291,7 +1291,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1308,7 +1308,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1325,7 +1325,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1342,7 +1342,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1359,7 +1359,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1376,7 +1376,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1393,7 +1393,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1413,7 +1413,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1433,7 +1433,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1453,7 +1453,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1470,7 +1470,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1490,7 +1490,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1507,7 +1507,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1524,7 +1524,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1541,7 +1541,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1558,7 +1558,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1575,7 +1575,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1592,7 +1592,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1609,7 +1609,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1626,7 +1626,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1643,7 +1643,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1660,7 +1660,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1677,7 +1677,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1694,7 +1694,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1711,7 +1711,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1728,7 +1728,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1745,7 +1745,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1762,7 +1762,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1779,7 +1779,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1796,7 +1796,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1813,7 +1813,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1830,7 +1830,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1847,7 +1847,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1864,7 +1864,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1881,7 +1881,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1898,7 +1898,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1915,7 +1915,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1932,7 +1932,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1949,7 +1949,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1966,7 +1966,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -1983,7 +1983,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2000,7 +2000,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2017,7 +2017,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2034,7 +2034,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2051,7 +2051,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2068,7 +2068,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2081,11 +2081,11 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2098,11 +2098,11 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2115,11 +2115,11 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2132,11 +2132,11 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2149,11 +2149,28 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
+ }
+ ]
+ },
+ {
+ "id": "CVE-2026-54518",
+ "source": {
+ "name": "NVD",
+ "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54518";
+ },
+ "analysis": {
+ "state": "not_affected",
+ "justification": "code_not_reachable",
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ },
+ "affects": [
+ {
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2166,11 +2183,11 @@
"analysis": {
"state": "not_affected",
"justification": "code_not_reachable",
- "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
+ "detail": "Four jackson-databind issues, in two groups:\n\n* **Only
the Hadoop-shaded old copy is affected.** CVE-2026-50193 (StackOverflow on
`toString()` of a\n deeply-nested `JsonNode`, fixed 2.14.0) and CVE-2026-54514
(eager DNS resolution / SSRF when\n deserializing into `InetSocketAddress`,
fixed 2.18.8 / 2.21.4) do not affect Solr's own\n jackson-databind (2.18.0 in
current 9.x, 2.22.0 in 9.11 \u2014 both patched). The `2.12.7.1` a scanner\n
flags is Hadoop's shaded co [...]
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2187,7 +2204,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2204,7 +2221,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2221,7 +2238,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2238,7 +2255,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2255,7 +2272,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2272,7 +2289,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2289,7 +2306,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2306,7 +2323,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2323,7 +2340,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2340,7 +2357,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2357,7 +2374,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2374,7 +2391,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2391,7 +2408,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2408,7 +2425,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2425,7 +2442,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2442,7 +2459,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
},
@@ -2459,7 +2476,7 @@
},
"affects": [
{
- "ref": "b9b908f7-4940-575d-8676-3e5ab0d7d761"
+ "ref": "c43af302-022f-51ef-8dee-4d7b09bf5f19"
}
]
}
diff --git a/output/vex.html b/output/vex.html
index f1c47d267..5b7d2b936 100644
--- a/output/vex.html
+++ b/output/vex.html
@@ -371,7 +371,7 @@ jackson-databind; Solr's own is 2.18.0 in current 9.x and
2.22.0 in 9.11.)</p>
</article>
<article id="cve-2026-50193" class="post panel radius">
<header class="post-header">
- <h3 class="title"><a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>, <a
href="https://github.com/advisories/GHSA-mhm7-754m-9p8w";>GHSA [...]
+ <h3 class="title"><a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54518";>CVE-20 [...]
<div class="panel callout">
<p class="subheader">
<strong>Status:</strong>
@@ -393,8 +393,9 @@ jackson-databind; Solr's own is 2.18.0 in current 9.x and
2.22.0 in 9.11.)</p>
<li><strong>Require Jackson features Solr does not use.</strong>
CVE-2026-54515 (case-insensitive deserialization
bypassing per-property <code>@JsonIgnoreProperties</code>), CVE-2026-59889
(<code>@JsonView</code> bypass for
<code>@JsonUnwrapped</code> container properties), CVE-2026-59888
(<code>@JsonIgnore</code> on a Record property bypassed
- via a <code>PropertyNamingStrategy</code>), and GHSA-mhm7-754m-9p8w
(<code>@JsonView</code> bypass for creator properties
- with <code>@JsonTypeInfo(include = As.EXTERNAL_PROPERTY)</code>) can reach
Solr's own jackson-databind, but
+ via a <code>PropertyNamingStrategy</code>), GHSA-mhm7-754m-9p8w
(<code>@JsonView</code> bypass for creator properties
+ with <code>@JsonTypeInfo(include = As.EXTERNAL_PROPERTY)</code>), and
CVE-2026-54518 (<code>@JsonView</code> bypass for
+ unwrapped creator parameters) can reach Solr's own jackson-databind, but
only when an application relies on those annotation-based mechanisms —
case-insensitive property
mapping, <code>@JsonView</code>, <code>@JsonUnwrapped</code>,
<code>@JsonIgnore</code> on records, or <code>@JsonTypeInfo</code>
external-property
polymorphism — to restrict which fields untrusted input may set. Solr uses
none of them: it maps
@@ -404,7 +405,7 @@ jackson-databind; Solr's own is 2.18.0 in current 9.x and
2.22.0 in 9.11.)</p>
<h4>References</h4>
<ul>
- <li>CVE: <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>, <a
href="https://github.com/advisories/GHSA-mhm7-754m-9p8w";>GHSA-mhm7 [...]
+ <li>CVE: <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-50193";>CVE-2026-50193</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54514";>CVE-2026-54514</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54515";>CVE-2026-54515</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59889";>CVE-2026-59889</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-59888";>CVE-2026-59888</a>, <a
href="https://nvd.nist.gov/vuln/detail/CVE-2026-54518";>CVE-2026-54 [...]
</ul>
</article>
<article id="cve-2026-46718" class="post panel radius">
