StackRadar

CVE-2021-46877

High

Advisory

Published 19 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
204
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 204 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.10.0, 2.10.1, 2.10.2, 2.10.3+15 more2.12.6, 2.13.1204
OSV records
GHSA-3x8x-79m2-3w2w

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jackson-databind@2.12.1
2.12.6

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
jackson-databind@2.12.3
2.12.6

Open the chart page →

32,259
cerebrowiremindVerified publisher2.4.01 of 1See more

cerebro wiremind 2.4.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.9.47d9e2b77e459
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

946
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
jackson-databind@2.12.5
2.12.6

Open the chart page →

6,675
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
jackson-databind@2.10.3
2.12.6

Open the chart page →

3,229
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

2,640
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
jackson-databind@2.11.4
2.12.6

Open the chart page →

4,099
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
jackson-databind@2.11.0
2.12.6
platform9community/api-gateway:latest40a4970de568
jackson-databind@2.11.0
2.12.6
platform9community/customers-service:latest2089811e5cc6
jackson-databind@2.11.0
2.12.6
platform9community/vets-service:latestd1165c94dfb3
jackson-databind@2.11.0
2.12.6
platform9community/visits-service:latest8d11b50368c6
jackson-databind@2.11.0
2.12.6

Open the chart page →

41,872
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
jackson-databind@2.11.2
2.12.6

Open the chart page →

6,048
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jackson-databind@2.12.1
2.12.6

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

7,930
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jackson-databind@2.10.1
2.12.6

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jackson-databind@2.11.4
2.12.6
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jackson-databind@2.11.3
2.12.6

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

7,166
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
jackson-databind@2.10.4
2.12.6

Open the chart page →

1,886
cmak-operatorcmak-operatorVerified publisher2.2.22 of 3See more

cmak-operator cmak-operator 2.2.2

2 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
jackson-databind@2.10.3
2.12.6
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
jackson-databind@2.10.0
2.12.6

Open the chart page →

4,605
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
jackson-databind@2.10.1
2.12.6

Open the chart page →

9,154
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
jackson-databind@2.10.0
2.12.6

Open the chart page →

10,311
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.12.0
2.12.6

Open the chart page →

7,335
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.12.6

Open the chart page →

1,335
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
jackson-databind@2.11.1
2.12.6
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
jackson-databind@2.10.4
2.12.6
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
jackson-databind@2.11.1
2.12.6

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
jackson-databind@2.10.4
2.12.6

Open the chart page →

10,730
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.12.6

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.12.6
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.12.6

Open the chart page →

84,444
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
jackson-databind@2.10.4
2.12.6

Open the chart page →

38,346
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
jackson-databind@2.10.0
2.12.6

Open the chart page →

2,140
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
jackson-databind@2.10.4
2.12.6

Open the chart page →

6,110
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
jackson-databind@2.10.2
2.12.6

Open the chart page →

8,752
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
jackson-databind@2.10.3
2.12.6

Open the chart page →

6,531
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
jackson-databind@2.11.3
2.12.6

Open the chart page →

2,751
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
jackson-databind@2.13.0
2.13.1

Open the chart page →

3,309
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
jackson-databind@2.11.2
2.12.6

Open the chart page →

5,291
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-databind@2.12.3
2.12.6

Open the chart page →

3,393
supertokensgraphql-hive-subcharts1.0.01 of 1See more

supertokens graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
jackson-databind@2.10.0
2.12.6

Open the chart page →

2,709
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jackson-databind@2.10.0
2.12.6

Open the chart page →

6,165
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
jackson-databind@2.11.4
2.12.6

Open the chart page →

5,624
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jackson-databind@2.10.4
2.12.6

Open the chart page →

17,284
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jackson-databind@2.12.0
2.12.6

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
jackson-databind@2.10.5
2.12.6

Open the chart page →

7,710
linstorkvaps1.14.02 of 11See more

linstor kvaps 1.14.0

2 of the 11 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
jackson-databind@2.11.4
2.12.6
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
jackson-databind@2.11.4
2.12.6

Open the chart page →

15,547
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
jackson-databind@2.10.0
2.12.6

Open the chart page →

19,187
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
jackson-databind@2.13.0
2.13.1

Open the chart page →

2,308
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
jackson-databind@2.11.4
2.12.6

Open the chart page →

1,916
todo-apipavanelthepu0.1.01 of 2See more

todo-api pavanelthepu 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
jackson-databind@2.12.3
2.12.6

Open the chart page →

2,544
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
jackson-databind@2.10.4
2.12.6

Open the chart page →

31,844
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
jackson-databind@2.12.3
2.12.6

Open the chart page →

4,621
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
jackson-databind@2.13.0
2.13.1

Open the chart page →

10,120
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
jackson-databind@2.10.4
2.12.6

Open the chart page →

6,045
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
jackson-databind@2.10.0
2.12.6

Open the chart page →

4,983
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
jackson-databind@2.12.3
2.12.6

Open the chart page →

24,930

Container images carrying it

204 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jackson-databind@2.12.1
2.12.6
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
jackson-databind@2.11.4
2.12.6
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jackson-databind@2.10.1
2.12.6
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-databind@2.12.3
2.12.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.