{"cves":["CVE-2026-89407","CVE-2026-89425"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[2.21.6-1.2]\n- Resolves: RHEL-286626\n- CVE-2026-89425 jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing\n  unbounded StringBuilder growth during malformed token processing\n\n[2.21.6-1.1]\n- Resolves: RHEL-272199\n- Fix CVE-2026-89407","id":"ELSA-2026-86706","ovalId":"oval:com.oracle.elsa:def:202686706","source":"oracle_linux","title":"ELSA-2026-86706:  jackson-core security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-86706.html"}