@@ -13,7 +13,7 @@ Project: jackson-databind
 #5969: `@JsonView` by-passed for some "setterless" creator properties
  [CVE-2026-54517]
  (fixed by Omkhar A)
-#5971: `@JsonView` by-passed for unwrapped creator parameters
+#5971: `@JsonView` by-passed for unwrapped creator parameters [CVE-2026-54518]
  (fixed by Omkhar A)
 #5974: `@JsonIgnore` on Record property ignored with `PropertyNamingStrategy`
  (reported by Omkhar A)