StackRadar

CVE-2021-46877

High

Advisory

Published 19 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
204
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 204 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.10.0, 2.10.1, 2.10.2, 2.10.3+15 more2.12.6, 2.13.1204
OSV records
GHSA-3x8x-79m2-3w2w

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
jackson-databind@2.11.1
2.12.6
refar/apm-operator-server:v5.7.1e5490f050f9f
jackson-databind@2.11.1
2.12.6

Open the chart page →

10,264
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
jackson-databind@2.10.3
2.12.6

Open the chart page →

6,696
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.12.6

Open the chart page →

4,153
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
jackson-databind@2.12.4
2.12.6

Open the chart page →

16,877
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
jackson-databind@2.11.0
2.12.6

Open the chart page →

2,427
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
jackson-databind@2.11.1
2.12.6

Open the chart page →

2,391
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
jackson-databind@2.12.3
2.12.6
elastictranscoder/media-storage:f6d861a026208b8c2359
jackson-databind@2.12.3
2.12.6
elastictranscoder/transcoder:627e21dcb4a0327029e6
jackson-databind@2.12.3
2.12.6
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
jackson-databind@2.12.3
2.12.6

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.12.6
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.12.6
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.12.6
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.12.6

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
jackson-databind@2.13.0
2.13.1
hugohg34/toposervice:0.0.2812a03b3f274
jackson-databind@2.13.0
2.13.1

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.12.6

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.12.6

Open the chart page →

10,603
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

16,198
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
jackson-databind@2.12.3
2.12.6

Open the chart page →

25,933
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jackson-databind@2.10.4
2.12.6

Open the chart page →

9,300
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
jackson-databind@2.13.0
2.13.1

Open the chart page →

27,721
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

2,640
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

4,547
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
jackson-databind@2.10.3
2.12.6

Open the chart page →

3,633
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.13.0
2.13.1

Open the chart page →

8,540
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
jackson-databind@2.11.4
2.12.6

Open the chart page →

2,421
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jackson-databind@2.10.2
2.12.6

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
jackson-databind@2.10.0
2.12.6

Open the chart page →

41,044
bpjstk-serviceopenshift1.0.04 of 6See more

bpjstk-service openshift 1.0.0

4 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
andrianrf/bpjstk-service:latest46abe878d9d8
jackson-databind@2.11.2
2.12.6
andrianrf/bpjstk-simulator:latestb63fdb51d39d
jackson-databind@2.11.2
2.12.6
andrianrf/iso-client:latestba560086ce15
jackson-databind@2.11.2
2.12.6
andrianrf/iso-server:latest7da47f525c7d
jackson-databind@2.11.0
2.12.6

Open the chart page →

34,671
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
jackson-databind@2.10.1
2.12.6

Open the chart page →

36,215
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
jackson-databind@2.13.0
2.13.1

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
jackson-databind@2.10.0
2.12.6

Open the chart page →

19,720
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
jackson-databind@2.11.4
2.12.6

Open the chart page →

10,392
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190

Container images carrying it

204 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
folioci/mod-serials-management:latest571fa1ffe8c9
jackson-databind@2.11.1
2.12.6
1
folioci/mod-service-interaction:latestf53c327a48e8
jackson-databind@2.11.1
2.12.6
1
fonoster/routr:1.0.0-rc52ca65af17cbc
jackson-databind@2.10.0
2.12.6
1
franrobles8/planner:v3.099985392d63c
jackson-databind@2.11.3
2.12.6
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
jackson-databind@2.11.4
2.12.6
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jackson-databind@2.11.4
2.12.6
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
jackson-databind@2.11.2
2.12.6
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
jackson-databind@2.11.2
2.12.6
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
jackson-databind@2.11.2
2.12.6
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
jackson-databind@2.11.2
2.12.6
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
jackson-databind@2.11.2
2.12.6
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
jackson-databind@2.11.2
2.12.6
1
gluufederation/opendj:4.3.0_011a1128b28b95
jackson-databind@2.11.1
2.12.6
1
gotson/komga:0.99.49b15ea6bfc30
jackson-databind@2.12.3
2.12.6
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
jackson-databind@2.11.4
2.12.6
1
hivemq/hivemq4:dns-4.5.144d194450d48e
jackson-databind@2.13.0
2.13.1
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
jackson-databind@2.13.0
2.13.1
1
hugohg34/planner:0.0.2171f61e8d7e2
jackson-databind@2.13.0
2.13.1
1
hugohg34/toposervice:0.0.2812a03b3f274
jackson-databind@2.13.0
2.13.1
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
jackson-databind@2.11.2
2.12.6
1
jhidalgo3/spring-echo-example:lateste08733191ea0
jackson-databind@2.11.4
2.12.6
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
jackson-databind@2.10.5
2.12.6
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
jackson-databind@2.11.3
2.12.6
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.12.6
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.12.6
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.12.6
1
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.12.6
1
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.12.6
1
library/elasticsearch:7.17.0332c6d416808
jackson-databind@2.10.4
2.12.6
1
library/elasticsearch:7.17.8fdc73b3249c1
jackson-databind@2.10.4
2.12.6
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jackson-databind@2.10.1
2.12.6
1
library/neo4j:4.2.4348e3f56faa2
jackson-databind@2.11.3
2.12.6
1
library/solr:8.7.0d124efd81fbb
jackson-databind@2.11.2
2.12.6
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jackson-databind@2.11.4
2.12.6
1
library/sonarqube:8.9.2-community88cd63154d4b
jackson-databind@2.11.4
2.12.6
1
library/sonarqube:8.2-communitya246bc64207e
jackson-databind@2.10.1
2.12.6
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jackson-databind@2.11.3
2.12.6
1
library/storm:2.4.0bd5d420506d6
jackson-databind@2.10.0
2.12.6
1
library/zookeeper:3.6.24c8a6d3b2338
jackson-databind@2.10.3
2.12.6
1
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
jackson-databind@2.10.4
2.12.6
1
lourdesmorente/new-planner:1.0.0608745878cdb
jackson-databind@2.13.0
2.13.1
1
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
jackson-databind@2.11.1
2.12.6
1
massimolauri/wso2is:5.11.0-centose08abf0ce767
jackson-databind@2.10.5
2.12.6
1
molynx/planner:v1441c9f52f092
jackson-databind@2.13.0
2.13.1
1
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.12.6
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
jackson-databind@2.13.0
2.13.1
1
onosproject/onos:2.2.144914a8d4b3f
jackson-databind@2.10.2
2.12.6
1
openhab/openhab:3.2.0d0aa4af452c1
jackson-databind@2.12.5
2.12.6
1
openwhisk/invoker:1.0.0f5831ec85525
jackson-databind@2.10.1
2.12.6
1
openzipkin/zipkin:2.21.060c3970df479
jackson-databind@2.10.3
2.12.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.