Repository navigation
Update dependency com.vonage:client to v9 (main) - autoclosed - #5
mend-for-github-com[bot] wants to merge 1 commit into
Security Report
❗️Scan Incomplete: The scan completed with partial failure. The integration encountered issues with one or more projects in this repository, preventing their scan. The errors occurred in the following package managers: gradle. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|---|
CVE-2026-54513Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
 High |
8.1 | Not Defined | 1.226% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-54512Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
High |
8.1 | Not Defined | 0.999% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-91777Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.45% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-91776Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.45% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-89425Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.19.0/a90640e59ea42632a8e331ff1d6b706cf306050a/jackson-core-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> jackson-datatype-jsr310-2.19.0.jar -> ❌ jackson-core-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.492% | Transitive jackson-core-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-89407Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.19.0/a90640e59ea42632a8e331ff1d6b706cf306050a/jackson-core-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> jackson-datatype-jsr310-2.19.0.jar -> ❌ jackson-core-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.546% | Transitive jackson-core-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-68498Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.19.0/a90640e59ea42632a8e331ff1d6b706cf306050a/jackson-core-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> jackson-datatype-jsr310-2.19.0.jar -> ❌ jackson-core-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | Transitive jackson-core-2.19.0.jar |
client-9.3.0.jar | None | |||
CVE-2026-68497Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.581% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-59888Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
 Medium |
6.5 | Not Defined | 0.423% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-83557Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
Medium |
5.6 | Not Defined | 0.717% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-85473Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.auth0/java-jwt/4.5.0/d7004155fe57a107cc40fb6be0132d8ad2530613/java-jwt-4.5.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> jwt-2.0.1.jar -> ❌ java-jwt-4.5.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | Transitive java-jwt-4.5.0.jar |
client-9.3.0.jar | None | |||
CVE-2026-77310Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.313% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-54515Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.443% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-54514Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.368% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-19032Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-databind/2.19.0/b3f7506f6414fb04760561eec11a0880165c2a4a/jackson-databind-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ jackson-databind-2.19.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.529% | Transitive jackson-databind-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2026-18401Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.fasterxml.jackson.core/jackson-core/2.19.0/a90640e59ea42632a8e331ff1d6b706cf306050a/jackson-core-2.19.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> jackson-datatype-jsr310-2.19.0.jar -> ❌ jackson-core-2.19.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.408% | Transitive jackson-core-2.19.0.jar |
client-9.3.0.jar | None | ||
CVE-2025-48924Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-lang3/3.17.0/b17d2136f0460dcc0d2016ceefca8723bdf4ee70/commons-lang3-3.17.0.jar Dependency Hierarchy: -> client-9.3.0.jar (Root Library) -> ❌ commons-lang3-3.17.0.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 2.632% | Transitive commons-lang3-3.17.0.jar |
client-9.3.0.jar | None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-68497 | jackson-databind-2.9.9.jar |
| CVE-2020-36183 | jackson-databind-2.9.9.jar |
| CVE-2020-14061 | jackson-databind-2.9.9.jar |
| CVE-2019-16942 | jackson-databind-2.9.9.jar |
| CVE-2020-14060 | jackson-databind-2.9.9.jar |
| CVE-2020-11112 | jackson-databind-2.9.9.jar |
| CVE-2020-36182 | jackson-databind-2.9.9.jar |
| CVE-2020-35728 | jackson-databind-2.9.9.jar |
| CVE-2026-91776 | jackson-databind-2.9.9.jar |
| CVE-2020-9546 | jackson-databind-2.9.9.jar |
| CVE-2020-14062 | jackson-databind-2.9.9.jar |
| CVE-2020-36184 | jackson-databind-2.9.9.jar |
| CVE-2026-77310 | jackson-databind-2.9.9.jar |
| CVE-2026-91777 | jackson-databind-2.9.9.jar |
| CVE-2020-11111 | jackson-databind-2.9.9.jar |
| CVE-2020-35490 | jackson-databind-2.9.9.jar |
| CVE-2020-36185 | jackson-databind-2.9.9.jar |
| CVE-2020-29582 | kotlin-stdlib-1.3.31.jar |
| CVE-2022-42004 | jackson-databind-2.9.9.jar |
| CVE-2020-36180 | jackson-databind-2.9.9.jar |
| CVE-2020-10969 | jackson-databind-2.9.9.jar |
| CVE-2020-36179 | jackson-databind-2.9.9.jar |
| CVE-2026-54514 | jackson-databind-2.9.9.jar |
| CVE-2020-10650 | jackson-databind-2.9.9.jar |
| CVE-2019-12814 | jackson-databind-2.9.9.jar |
| CVE-2020-10672 | jackson-databind-2.9.9.jar |
| CVE-2020-24750 | jackson-databind-2.9.9.jar |
| WS-2019-0379 | commons-codec-1.11.jar |
| CVE-2019-17531 | jackson-databind-2.9.9.jar |
| CVE-2025-52999 | jackson-core-2.9.9.jar |
| CVE-2022-24329 | kotlin-stdlib-1.3.31.jar |
| CVE-2020-9548 | jackson-databind-2.9.9.jar |
| CVE-2019-14892 | jackson-databind-2.9.9.jar |
| CVE-2020-11113 | jackson-databind-2.9.9.jar |
| CVE-2020-14195 | jackson-databind-2.9.9.jar |
| CVE-2020-36187 | jackson-databind-2.9.9.jar |
| CVE-2019-16335 | jackson-databind-2.9.9.jar |
| CVE-2020-8840 | jackson-databind-2.9.9.jar |
| CVE-2021-29425 | commons-io-2.5.jar |
| CVE-2026-19032 | jackson-databind-2.9.9.jar |
| CVE-2026-89425 | jackson-core-2.9.9.jar |
| CVE-2020-36188 | jackson-databind-2.9.9.jar |
| CVE-2020-24616 | jackson-databind-2.9.9.jar |
| CVE-2020-11619 | jackson-databind-2.9.9.jar |
| CVE-2021-20190 | jackson-databind-2.9.9.jar |
| WS-2022-0468 | jackson-core-2.9.9.jar |
| CVE-2020-10673 | jackson-databind-2.9.9.jar |
| CVE-2019-14540 | jackson-databind-2.9.9.jar |
| CVE-2019-20330 | jackson-databind-2.9.9.jar |
| CVE-2019-17267 | jackson-databind-2.9.9.jar |
| CVE-2025-49128 | jackson-core-2.9.9.jar |
| CVE-2019-14893 | jackson-databind-2.9.9.jar |
| CVE-2025-48924 | commons-lang3-3.5.jar |
| CVE-2020-9547 | jackson-databind-2.9.9.jar |
| CVE-2020-35491 | jackson-databind-2.9.9.jar |
| CVE-2019-14379 | jackson-databind-2.9.9.jar |
| CVE-2020-10968 | jackson-databind-2.9.9.jar |
| CVE-2022-42003 | jackson-databind-2.9.9.jar |
| CVE-2020-36186 | jackson-databind-2.9.9.jar |
| CVE-2020-36189 | jackson-databind-2.9.9.jar |
| CVE-2020-36181 | jackson-databind-2.9.9.jar |
| CVE-2019-16943 | jackson-databind-2.9.9.jar |
| CVE-2024-47554 | commons-io-2.5.jar |
| CVE-2019-12384 | jackson-databind-2.9.9.jar |
| CVE-2020-11620 | jackson-databind-2.9.9.jar |
| CVE-2020-25649 | jackson-databind-2.9.9.jar |
| CVE-2019-14439 | jackson-databind-2.9.9.jar |
| CVE-2026-54515 | jackson-databind-2.9.9.jar |
| CVE-2020-13956 | httpclient-4.5.8.jar |
Base branch total remaining vulnerabilities: 69
Base branch commit: 12ec9977edfe934fa90d7aeb7a99e9059990d923
Total libraries scanned: 15
Scan token: 2c86ffda96644f46a2cbdcb5bc052f1a