{"vulnerability": "CVE-2026-59889", "sightings": [{"uuid": "66b81d11-551e-4153-9701-06c85884ca8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59889", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mr72fj3ek32v", "content": "A flaw in Jackson, the JSON library inside most Java apps, lets a low-privilege user write admin-only fields.\n\nIt hits apps that use Jackson's view feature as a write gate. (CVE-2026-59889)\n\nFix: update to 2.18.9, 2.21.5 or 3.1.5.", "creation_timestamp": "2026-07-22T00:19:16.692320Z"}, {"uuid": "59092239-a792-4b05-a6b4-4f5905e08955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-59889", "type": "published-proof-of-concept", "source": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh", "content": "", "creation_timestamp": "2026-07-22T00:35:03.166122Z"}]}