StackRadar

CVE-2018-12023

High

Advisory

Published 15 Jun 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.089
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

Deserialization of Untrusted Data

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.7.3, 2.7.8, 2.7.9, 2.7.9.3+12 more2.7.9.4, 2.8.11.2, 2.9.640
OSV records
GHSA-6wqp-v4v6-c87c

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jackson-databind@2.9.5
2.9.6
dbanda/spark:2.4.6d0e6367876ae
jackson-databind@2.7.8
2.7.9.4

Open the chart page →

13,738
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-databind@2.9.4
2.9.6

Open the chart page →

7,166
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.7.8
2.7.9.4

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jackson-databind@2.9.5
2.9.6

Open the chart page →

18,042
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.7.8
2.7.9.4

Open the chart page →

5,772
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.9.2
2.9.6

Open the chart page →

13,392
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.9.2
2.9.6
gradiant/opentsdb:2.4.0c33d53913869
jackson-databind@2.9.5
2.9.6

Open the chart page →

17,511
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.8.11.2

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.8.11.2

Open the chart page →

3,703
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.9.2
2.9.6

Open the chart page →

13,392
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.7.8
2.7.9.4

Open the chart page →

5,772
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
jackson-databind@2.9.4
2.9.6

Open the chart page →

4,000
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
jackson-databind@2.8.9
2.8.11.2

Open the chart page →

8,063
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
jackson-databind@2.8.8
2.8.11.2

Open the chart page →

9,808
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-databind@2.8.11
2.8.11.2

Open the chart page →

5,078
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
jackson-databind@2.9.4
2.9.6

Open the chart page →

9,144
hazelcastcloudnativeapp1.3.11 of 1See more

hazelcast cloudnativeapp 1.3.1

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
hazelcast/hazelcast:3.11.2ca7d5589744f
jackson-databind@2.8.7
2.8.11.2

Open the chart page →

4,982
hazelcast-jetcloudnativeapp1.1.01 of 1See more

hazelcast-jet cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:3.0df495e64ea65
jackson-databind@2.8.7
2.8.11.2

Open the chart page →

5,326
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jackson-databind@2.8.1
2.8.11.2

Open the chart page →

7,226
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jackson-databind@2.9.5
2.9.6

Open the chart page →

16,860
my-chartfleet-web-app0.1.02 of 6See more

my-chart fleet-web-app 0.1.0

2 of the 6 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
jackson-databind@2.8.7
2.8.11.2
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
jackson-databind@2.8.1
2.8.11.2

Open the chart page →

24,296
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
jackson-databind@2.9.4
2.9.6

Open the chart page →

6,988
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.9.2
2.9.6
gradiant/opentsdb:2.4.0c33d53913869
jackson-databind@2.9.5
2.9.6

Open the chart page →

17,511
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jackson-databind@2.8.4
2.8.11.2

Open the chart page →

4,303
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
jackson-databind@2.7.9
2.7.9.4

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jackson-databind@2.8.8
2.8.11.2
ibmcom/microclimate-theia:lateste17bdccc5030
jackson-databind@2.8.8
2.8.11.2

Open the chart page →

57,669
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jackson-databind@2.9.4
2.9.6

Open the chart page →

19,295
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
jackson-databind@2.8.11
2.8.11.2

Open the chart page →

7,929
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jackson-databind@2.9.5
2.9.6

Open the chart page →

15,855
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jackson-databind@2.8.6
2.8.11.2

Open the chart page →

55,726
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.9.4
2.9.6

Open the chart page →

8,540
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
jackson-databind@2.9.5
2.9.6

Open the chart page →

63,223
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
jackson-databind@2.7.3
2.7.9.4

Open the chart page →

88,546
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
jackson-databind@2.9.0
2.9.6

Open the chart page →

42,614
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
jackson-databind@2.7.3
2.7.9.4

Open the chart page →

38,865
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
jackson-databind@2.9.5
2.9.6

Open the chart page →

6,350
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jackson-databind@2.9.4
2.9.6

Open the chart page →

4,177
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jackson-databind@2.9.5
2.9.6

Open the chart page →

9,606
cerebrostakaterVerified publisher0.5.11 of 2See more

cerebro stakater 0.5.1

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.13e860068e403
jackson-databind@2.8.11.1
2.8.11.2

Open the chart page →

2,956
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
jackson-databind@2.9.5
2.9.6

Open the chart page →

11,841
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
jackson-databind@2.8.6
2.8.11.2

Open the chart page →

8,554
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
jackson-databind@2.7.9.3
2.7.9.4

Open the chart page →

4,538
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2018-12023.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jackson-databind@2.8.4
2.8.11.2

Open the chart page →

4,303

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.9.2
2.9.6
4
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jackson-databind@2.9.5
2.9.6
2
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.7.8
2.7.9.4
2
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.8.11.2
2
gradiant/opentsdb:2.4.0c33d53913869
jackson-databind@2.9.5
2.9.6
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
jackson-databind@2.8.4
2.8.11.2
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-databind@2.9.4
2.9.6
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
jackson-databind@2.8.11
2.8.11.2
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jackson-databind@2.9.5
2.9.6
1
bivas/presto:0.19605545994f806
jackson-databind@2.8.1
2.8.11.2
1
choerodon/event-store-service:0.8.03c94c97f6f69
jackson-databind@2.8.8
2.8.11.2
1
craigwillis/c2metadata-bd:latestae317d7e4724
jackson-databind@2.8.6
2.8.11.2
1
datappeal/hive-metastore:lateste38c085a3567
jackson-databind@2.9.5
2.9.6
1
dbanda/livy:0.80ca125e68e53
jackson-databind@2.9.5
2.9.6
1
dbanda/spark:2.4.6d0e6367876ae
jackson-databind@2.7.8
2.7.9.4
1
folioci/mod-marccat:latest1b57d690d568
jackson-databind@2.9.4
2.9.6
1
gocd/gocd-server:v19.3.02da45cb09d57
jackson-databind@2.9.4
2.9.6
1
gradiant/jmxproxy:3.4.045eceb1bc55c
jackson-databind@2.9.4
2.9.6
1
graylog2/server:2.4.3-38ff28c66e6c1
jackson-databind@2.8.9
2.8.11.2
1
hazelcast/hazelcast:3.11.2ca7d5589744f
jackson-databind@2.8.7
2.8.11.2
1
hazelcast/hazelcast-jet:3.0df495e64ea65
jackson-databind@2.8.7
2.8.11.2
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
jackson-databind@2.7.9
2.7.9.4
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jackson-databind@2.9.4
2.9.6
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jackson-databind@2.8.8
2.8.11.2
1
ibmcom/microclimate-theia:lateste17bdccc5030
jackson-databind@2.8.8
2.8.11.2
1
just1not2/streama:1.10.48a2305192dec
jackson-databind@2.8.6
2.8.11.2
1
library/sonarqube:6.7.6-community0ae5169e3d0f
jackson-databind@2.9.5
2.9.6
1
lmenezes/cerebro:0.8.13e860068e403
jackson-databind@2.8.11.1
2.8.11.2
1
muluder/prograncontrollermcord:0.1.843b597a93da7
jackson-databind@2.7.3
2.7.9.4
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
jackson-databind@2.9.5
2.9.6
1
omecproject/onos-progran:1.0.05715e5648aa0
jackson-databind@2.7.3
2.7.9.4
1
opencord/ves-agent:1.0.04187e2a8c918
jackson-databind@2.9.5
2.9.6
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
jackson-databind@2.7.9.3
2.7.9.4
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
jackson-databind@2.9.4
2.9.6
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
jackson-databind@2.8.7
2.8.11.2
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
jackson-databind@2.8.1
2.8.11.2
1
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.7.8
2.7.9.4
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-databind@2.8.11
2.8.11.2
1
woojoong/wowza:latestec230db19652
jackson-databind@2.9.0
2.9.6
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.9.4
2.9.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.