Vulnerabilities
| Description | Impacted SBOMs | |||
|---|---|---|---|---|
| CVE-2024-49340 | woodstox-core: XML parsing vulnerability allows unauthorized access to network resources | High (8.9) v3.1 |
Oct 24, 2024 | 2 |
| CVE-2026-54515 | jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties | Medium (5.3) v3.1 |
Jun 23, 2026 | 2 |
| CVE-2026-59889 | jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization | Medium (6.5) v3.1 |
Jul 14, 2026 | 1 |