CVE-2021-46877
HighAdvisory
Published 19 Mar 2023In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 263
- of 17,781 indexed, latest versions
- Container images
- 204
- deployed by those charts
- Fix available
- 1 of 1
- affected package
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 204 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jackson-databindmaven | 2.10.0, 2.10.1, 2.10.2, 2.10.3+15 more | 2.12.6, 2.13.1 | 204 |
- OSV records
- GHSA-3x8x-79m2-3w2w
Charts affected
263 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| pagestest4322 | 1.0.0 | 1 of 3See more | 20,190 |
| shenyutest-helm | 2.4.21 | 2 of 2See more | 12,513 |
| pagesthiru-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagesthuy-pages | 1.0.0 | 1 of 3See more | 20,190 |
| hermestoukVerified publisher | 0.6.0 | 1 of 3See more | 12,455 |
| pagesvictor-pages | 1.0.0 | 1 of 3See more | 20,190 |
| kube-monitoring-telegram-botviento-repository | 1.0.0 | 1 of 1See more | 7,885 |
| pageswalter | 1.0.0 | 1 of 3See more | 20,190 |
| sonarqubewebencryptor | 6.7.3 | 1 of 3See more | 5,460 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
| apicurio-registry-sqlwitcom-gmbh | 0.1.0 | 1 of 1See more | 3,424 |
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
| is-pattern-1wso2is-pattern1 | 5.11.0 | 1 of 2See more | 6,213 |
Container images carrying it
204 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| folioci/ | 571fa1ffe8c9 | jackson-databind | 2.12.6 | 1 |
| folioci/ | f53c327a48e8 | jackson-databind | 2.12.6 | 1 |
| fonoster/ | 2ca65af17cbc | jackson-databind | 2.12.6 | 1 |
| franrobles8/ | 99985392d63c | jackson-databind | 2.12.6 | 1 |
| freeipa/ | c87d77342bf5 | jackson-databind | 2.12.6 | 1 |
| geonetwork/ | 20c9bb761f67 | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | ca58b74529cd | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | 5dc0c93a1710 | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | 8c70ee06d5ab | jackson-databind | 2.12.6 | 1 |
| geoservercloud/ | 42775ba6a4da | jackson-databind | 2.12.6 | 1 |
| gluufederation/ | 1a1128b28b95 | jackson-databind | 2.12.6 | 1 |
| gotson/ | 9b15ea6bfc30 | jackson-databind | 2.12.6 | 1 |
| hazelcast/ | a825ecbe9fda | jackson-databind | 2.12.6 | 1 |
| hivemq/ | 4d194450d48e | jackson-databind | 2.13.1 | 1 |
| huertaslopez/ | e2c18bd65472 | jackson-databind | 2.13.1 | 1 |
| hugohg34/ | 171f61e8d7e2 | jackson-databind | 2.13.1 | 1 |
| hugohg34/ | 812a03b3f274 | jackson-databind | 2.13.1 | 1 |
| intelloop/ | 4c61bc3dd3f8 | jackson-databind | 2.12.6 | 1 |
| jhidalgo3/ | e08733191ea0 | jackson-databind | 2.12.6 | 1 |
| jingking/ | 43e74ab234e1 | jackson-databind | 2.12.6 | 1 |
| krontechnology/ | 7feef7d2ab42 | jackson-databind | 2.12.6 | 1 |
| lavandadelpatio/ | 94e225a5a6f8 | jackson-databind | 2.12.6 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | jackson-databind | 2.12.6 | 1 |
| lavandadelpatio/ | 71f2ccec8c0d | jackson-databind | 2.12.6 | 1 |
| lavandadelpatio/ | f36af885e915 | jackson-databind | 2.12.6 | 1 |
| library/ | c7984a05e15b | jackson-databind | 2.12.6 | 1 |
| library/ | 332c6d416808 | jackson-databind | 2.12.6 | 1 |
| library/ | fdc73b3249c1 | jackson-databind | 2.12.6 | 1 |
| library/ | 1fe4fb22a2a5 | jackson-databind | 2.12.6 | 1 |
| library/ | 348e3f56faa2 | jackson-databind | 2.12.6 | 1 |
| library/ | d124efd81fbb | jackson-databind | 2.12.6 | 1 |
| library/ | 7e43ff493a47 | jackson-databind | 2.12.6 | 1 |
| library/ | 88cd63154d4b | jackson-databind | 2.12.6 | 1 |
| library/ | a246bc64207e | jackson-databind | 2.12.6 | 1 |
| library/ | a9bc5a3a1fc3 | jackson-databind | 2.12.6 | 1 |
| library/ | bd5d420506d6 | jackson-databind | 2.12.6 | 1 |
| library/ | 4c8a6d3b2338 | jackson-databind | 2.12.6 | 1 |
| lightbend/ | 2647f396de23 | jackson-databind | 2.12.6 | 1 |
| lourdesmorente/ | 608745878cdb | jackson-databind | 2.13.1 | 1 |
| lsmaster/ | 061eb5fbfa00 | jackson-databind | 2.12.6 | 1 |
| massimolauri/ | e08abf0ce767 | jackson-databind | 2.12.6 | 1 |
| molynx/ | 441c9f52f092 | jackson-databind | 2.13.1 | 1 |
| nacos/ | fe6e5688cdf3 | jackson-databind | 2.12.6 | 1 |
| novumrgi/ | 8c54790675b1 | jackson-databind | 2.13.1 | 1 |
| onosproject/ | 44914a8d4b3f | jackson-databind | 2.12.6 | 1 |
| openhab/ | d0aa4af452c1 | jackson-databind | 2.12.6 | 1 |
| openwhisk/ | f5831ec85525 | jackson-databind | 2.12.6 | 1 |
| openzipkin/ | 60c3970df479 | jackson-databind | 2.12.6 | 1 |