From 23ecd08c34eec5654f70f92702a683d58216c057 Mon Sep 17 00:00:00 2001
From: mahsa-lamiyan <92710753+mahsa-lamiyan@users.noreply.github.com>
Date: Wed, 15 Jul 2026 10:50:08 +0200
Subject: [PATCH] Add fixed versions for all patched jackson-databind releases

Mark all four confirmed patch releases as fixed:

- 2.18.9 for the 2.8.0 range (com.fasterxml.jackson.core)
- 2.21.5 for the 2.19.0 range (com.fasterxml.jackson.core)
- 2.22.1 for the 2.22.0 range (com.fasterxml.jackson.core)
- 3.1.4 for the 3.1.0 range (tools.jackson.core only)

Per maintainer feedback, 3.x fixes belong under tools.jackson.core; com.fasterxml.jackson.core covers 2.x releases only.

Adds official Jackson release wiki pages as references.

Addresses review feedback from @cowtowncoder.
---
 .../GHSA-5jmj-h7xm-6q6v.json                  | 34 ++++++++++++++-----
 1 file changed, 25 insertions(+), 9 deletions(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-5jmj-h7xm-6q6v/GHSA-5jmj-h7xm-6q6v.json b/advisories/github-reviewed/2026/06/GHSA-5jmj-h7xm-6q6v/GHSA-5jmj-h7xm-6q6v.json
index 2b0e34f174b6f..a39204459d523 100644
--- a/advisories/github-reviewed/2026/06/GHSA-5jmj-h7xm-6q6v/GHSA-5jmj-h7xm-6q6v.json
+++ b/advisories/github-reviewed/2026/06/GHSA-5jmj-h7xm-6q6v/GHSA-5jmj-h7xm-6q6v.json
@@ -83,13 +83,13 @@
           "events": [
             {
               "introduced": "2.19.0"
+            },
+            {
+              "fixed": "2.21.5"
             }
           ]
         }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "< 2.21.5"
-      }
+      ]
     },
     {
       "package": {
@@ -102,13 +102,13 @@
           "events": [
             {
               "introduced": "2.22.0"
+            },
+            {
+              "fixed": "2.22.1"
             }
           ]
         }
-      ],
-      "database_specific": {
-        "last_known_affected_version_range": "< 2.22.1"
-      }
+      ]
     }
   ],
   "references": [
@@ -132,6 +132,22 @@
       "type": "WEB",
       "url": "https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.18.9"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.21.5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.22.1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/FasterXML/jackson/wiki/Jackson-Release-3.1.4"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/FasterXML/jackson-databind"
@@ -146,4 +162,4 @@
     "github_reviewed_at": "2026-06-23T21:23:58Z",
     "nvd_published_at": "2026-06-23T21:17:02Z"
   }
-}
\ No newline at end of file
+}