StackRadar

CVE-2021-46877

High

Advisory

Published 19 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
204
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 204 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.10.0, 2.10.1, 2.10.2, 2.10.3+15 more2.12.6, 2.13.1204
OSV records
GHSA-3x8x-79m2-3w2w

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
jackson-databind@2.11.1
2.12.6
refar/apm-operator-server:v5.7.1e5490f050f9f
jackson-databind@2.11.1
2.12.6

Open the chart page →

10,264
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
radondb/zookeeper:3.6.216981604f1a0
jackson-databind@2.10.3
2.12.6

Open the chart page →

6,696
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.12.6

Open the chart page →

4,153
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
penpotapp/exporter:2.2.15c835ffd87ab
jackson-databind@2.12.4
2.12.6

Open the chart page →

16,877
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
jackson-databind@2.11.0
2.12.6

Open the chart page →

2,427
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
jackson-databind@2.11.1
2.12.6

Open the chart page →

2,391
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
jackson-databind@2.12.3
2.12.6
elastictranscoder/media-storage:f6d861a026208b8c2359
jackson-databind@2.12.3
2.12.6
elastictranscoder/transcoder:627e21dcb4a0327029e6
jackson-databind@2.12.3
2.12.6
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
jackson-databind@2.12.3
2.12.6

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.12.6
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.12.6
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.12.6
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.12.6

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
jackson-databind@2.13.0
2.13.1
hugohg34/toposervice:0.0.2812a03b3f274
jackson-databind@2.13.0
2.13.1

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.12.6

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.12.6

Open the chart page →

10,603
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

16,198
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
jackson-databind@2.12.3
2.12.6

Open the chart page →

25,933
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jackson-databind@2.10.4
2.12.6

Open the chart page →

9,300
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
jackson-databind@2.13.0
2.13.1

Open the chart page →

27,721
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

2,640
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jackson-databind@2.10.5.1
2.12.6

Open the chart page →

4,547
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
jackson-databind@2.10.3
2.12.6

Open the chart page →

3,633
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.13.0
2.13.1

Open the chart page →

8,540
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
jackson-databind@2.11.4
2.12.6

Open the chart page →

2,421
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jackson-databind@2.10.2
2.12.6

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
jackson-databind@2.10.0
2.12.6

Open the chart page →

41,044
bpjstk-serviceopenshift1.0.04 of 6See more

bpjstk-service openshift 1.0.0

4 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
andrianrf/bpjstk-service:latest46abe878d9d8
jackson-databind@2.11.2
2.12.6
andrianrf/bpjstk-simulator:latestb63fdb51d39d
jackson-databind@2.11.2
2.12.6
andrianrf/iso-client:latestba560086ce15
jackson-databind@2.11.2
2.12.6
andrianrf/iso-server:latest7da47f525c7d
jackson-databind@2.11.0
2.12.6

Open the chart page →

34,671
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
jackson-databind@2.10.1
2.12.6

Open the chart page →

36,215
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
jackson-databind@2.13.0
2.13.1

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
jackson-databind@2.10.0
2.12.6

Open the chart page →

19,720
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
jackson-databind@2.11.4
2.12.6

Open the chart page →

10,392
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.6

Open the chart page →

20,190

Container images carrying it

204 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jackson-databind@2.12.1
2.12.6
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
jackson-databind@2.11.4
2.12.6
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jackson-databind@2.10.1
2.12.6
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-databind@2.12.3
2.12.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.