StackRadar

CVE-2019-17531

Critical

Advisory

Published 13 Nov 2019In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.054
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
127
of 17,781 indexed, latest versions
Container images
136
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind polymorphic typing issue

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 136 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.0.5, 2.2.3, 2.3.0, 2.3.3+32 more2.6.7.3, 2.8.11.5, 2.9.10.1136
OSV records
GHSA-gjmw-vf9h-g25v

Charts affected

127 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
jackson-databind@2.8.11.2
2.8.11.5

Open the chart page →

10,732
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jackson-databind@2.4.0
2.6.7.3
dbanda/spark:2.4.6d0e6367876ae
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

6,048
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jackson-databind@2.3.3
2.6.7.3

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

7,930
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jackson-databind@2.6.5
2.6.7.3
gradiant/hdfs:2.7.73b28784ba41f
jackson-databind@2.4.0
2.6.7.3
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jackson-databind@2.2.3
2.6.7.3

Open the chart page →

20,837
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jackson-databind@2.9.5
2.9.10.1
apache/skywalking-ui:8.1.067d50e4deff4
jackson-databind@2.9.10
2.9.10.1

Open the chart page →

18,042
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

8,198
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

5,772
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
jackson-databind@2.9.6
2.9.10.1

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.4.0
2.6.7.3
gradiant/hdfs:2.7.73b28784ba41f
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jackson-databind@2.6.5
2.6.7.3

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.73 of 6See more

opentsdb dmwm-bigdata 0.1.7

3 of the 6 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.4.0
2.6.7.3
gradiant/hdfs:2.7.73b28784ba41f
jackson-databind@2.4.0
2.6.7.3
gradiant/opentsdb:2.4.0c33d53913869
jackson-databind@2.9.5
2.9.10.1

Open the chart page →

17,511
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

6,531
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.8.11.5

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.8.11.5

Open the chart page →

3,703
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jackson-databind@2.4.0
2.6.7.3
gradiant/hdfs:2.7.73b28784ba41f
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

6,165
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

4,679
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

12,019
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

5,772
kafka-managerradar-baseVerified publisher2.3.11 of 1See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
jackson-databind@2.9.4
2.9.10.1

Open the chart page →

4,000
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
jackson-databind@2.8.11.2
2.8.11.5
seldonio/cluster-manager:0.2.729e362bb1ba2
jackson-databind@2.8.11.2
2.8.11.5

Open the chart page →

13,798
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

13,486
ckanstatcan0.0.352 of 8See more

ckan statcan 0.0.35

2 of the 8 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
jackson-databind@2.4.0
2.6.7.3
library/zookeeper:3.5.5b7a76ec06f68
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

24,930
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
jackson-databind@2.8.9
2.8.11.5

Open the chart page →

8,063
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

11,553
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

8,866
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
assistiot/authorization_svr:latestdb9361dad79b
jackson-databind@2.6.0
2.6.7.3

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
jackson-databind@2.2.3
2.6.7.3

Open the chart page →

14,728
tsoragecetic0.4.112 of 8See more

tsorage cetic 0.4.11

2 of the 8 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
jackson-databind@2.9.6
2.9.10.1
library/zookeeper:3.5.5b7a76ec06f68
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

12,018
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
jackson-databind@2.8.8
2.8.11.5

Open the chart page →

9,808
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-databind@2.8.11
2.8.11.5

Open the chart page →

5,078
cerebrocloudnativeapp1.0.11 of 2See more

cerebro cloudnativeapp 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.8.36684131caf5f
jackson-databind@2.9.8
2.9.10.1

Open the chart page →

2,842
cosbenchcloudnativeapp1.0.11 of 1See more

cosbench cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
zenko/zenko-cosbench:0.0.6386a1f48ec0e
jackson-databind@2.5.3
2.6.7.3

Open the chart page →

4,906
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
jackson-databind@2.9.4
2.9.10.1

Open the chart page →

9,144
hazelcastcloudnativeapp1.3.11 of 1See more

hazelcast cloudnativeapp 1.3.1

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
hazelcast/hazelcast:3.11.2ca7d5589744f
jackson-databind@2.8.7
2.8.11.5

Open the chart page →

4,982
hazelcast-jetcloudnativeapp1.1.01 of 1See more

hazelcast-jet cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
hazelcast/hazelcast-jet:3.0df495e64ea65
jackson-databind@2.8.7
2.8.11.5

Open the chart page →

5,326
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
jackson-databind@2.5.3
2.6.7.3

Open the chart page →

4,601
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jackson-databind@2.8.1
2.8.11.5

Open the chart page →

7,226
prometheus-cloudwatch-exportercloudnativeapp0.4.51 of 1See more

prometheus-cloudwatch-exporter cloudnativeapp 0.4.5

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
jackson-databind@2.6.6
2.6.7.3

Open the chart page →

2,629
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
jackson-databind@2.5.4
2.6.7.3

Open the chart page →

6,497
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
jackson-databind@2.3.3
2.6.7.3

Open the chart page →

23,665
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-17531.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
jackson-databind@2.4.0
2.6.7.3

Open the chart page →

14,066

Container images carrying it

136 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
openkm/openkm-ce:6.3.113bc465a7461b
jackson-databind@2.9.7
2.9.10.1
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
jackson-databind@2.7.9.3
2.8.11.5
1
opsmx11/issuegen:v2.1.05c50ca123d88
jackson-databind@2.9.9.3
2.9.10.1
1
paulczar/spring-helloworld:latestc7140cecd5f7
jackson-databind@2.9.8
2.9.10.1
1
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
jackson-databind@2.3.3
2.6.7.3
1
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
jackson-databind@2.6.6
2.6.7.3
1
radarbase/kafka-manager:1.3.3.181d2af7dd5a4e
jackson-databind@2.9.4
2.9.10.1
1
raykrueger/riemann:0.2.14c8baf3de57bb
jackson-databind@2.5.4
2.6.7.3
1
refar/apm-api:v5.7.1241373fa2972
jackson-databind@2.7.9.4
2.8.11.5
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
jackson-databind@2.8.7
2.8.11.5
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
jackson-databind@2.8.1
2.8.11.5
1
rundeck/rundeck:3.2.74d64fe56f767
jackson-databind@2.3.3
2.6.7.3
1
rundeck/rundeck:3.0.16b13e8059ad72
jackson-databind@2.3.3
2.6.7.3
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
jackson-databind@2.9.9
2.9.10.1
1
seldonio/apife:0.2.7ba81b17f00eb
jackson-databind@2.8.11.2
2.8.11.5
1
seldonio/apife:0.3.1eea0d3f578ca
jackson-databind@2.9.9
2.9.10.1
1
seldonio/cluster-manager:0.2.729e362bb1ba2
jackson-databind@2.8.11.2
2.8.11.5
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jackson-databind@2.4.0
2.6.7.3
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jackson-databind@2.6.5
2.6.7.3
1
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.4.0
2.6.7.3
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-databind@2.8.11
2.8.11.5
1
trinodb/trino:45038c6f24ab1a4
jackson-databind@2.4.0
2.6.7.3
1
trinodb/trino:405ee80ab5eeab2
jackson-databind@2.4.0
2.6.7.3
1
woojoong/wowza:latestec230db19652
jackson-databind@2.9.0
2.9.10.1
1
xetusoss/archiva:v2.2.588f25242b9ee
jackson-databind@2.3.0
2.6.7.3
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
jackson-databind@2.5.3
2.6.7.3
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
jackson-databind@2.4.0
2.6.7.3
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jackson-databind@2.4.0
2.6.7.3
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
jackson-databind@2.9.8
2.9.10.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.4.0
2.6.7.3
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
jackson-databind@2.9.10
2.9.10.1
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
jackson-databind@2.9.9
2.9.10.1
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
jackson-databind@2.4.0
2.6.7.3
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jackson-databind@2.9.8
2.9.10.1
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
jackson-databind@2.9.8
2.9.10.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jackson-databind@2.4.0
2.6.7.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.