StackRadarChart IndexLive demo

CVE-2021-46877

High

Advisory

Published 19 Mar 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 64th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 263; of 17,781 indexed, latest versions
Container images: 204; deployed by those charts
Fix available: 1 of 1; affected package

jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 204 images.

Affected package	Affected versions	Fixed in	Images
jackson-databindmaven	2.10.0, 2.10.1, 2.10.2, 2.10.3+15 more	2.12.6, 2.13.1	204

OSV records: GHSA-3x8x-79m2-3w2w

Charts affected

263 by stars

Chart

Latest

Affected images

Radar Score

pagestest4322

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	jackson-databind@2.11.0	2.12.6

Open the chart page →

20,190

shenyutest-helm

2 of 2 See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	jackson-databind@2.10.1	2.12.6
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	jackson-databind@2.10.1	2.12.6

Open the chart page →

12,513

pagesthiru-pages

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	jackson-databind@2.11.0	2.12.6

Open the chart page →

20,190

pagesthuy-pages

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	jackson-databind@2.11.0	2.12.6

Open the chart page →

20,190

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	jackson-databind@2.12.1	2.12.6

Open the chart page →

12,455

pagesvictor-pages

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	jackson-databind@2.11.0	2.12.6

Open the chart page →

20,190

kube-monitoring-telegram-botviento-repository

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	jackson-databind@2.12.4	2.12.6

Open the chart page →

7,885

pageswalter

1 of 3 See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	jackson-databind@2.11.0	2.12.6

Open the chart page →

20,190

sonarqubewebencryptor

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	jackson-databind@2.10.1	2.12.6

Open the chart page →

5,460

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	jackson-databind@2.12.1	2.12.6

Open the chart page →

28,605

apicurio-registry-sqlwitcom-gmbh

1 of 1 See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-jpa :1.3.2.Final	44eeddd3562c	jackson-databind@2.11.3	2.12.6

Open the chart page →

3,424

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	jackson-databind@2.10.5.1	2.12.6

Open the chart page →

5,806

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2021-46877.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	jackson-databind@2.10.5	2.12.6

Open the chart page →

6,213

Container images carrying it

204 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	jackson-databind@2.12.1	2.12.6	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	jackson-databind@2.11.4	2.12.6	1
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	jackson-databind@2.10.1	2.12.6	1
quay.io/srcmaxim/gradle-example-app :1.1.3	7c3fc28746ef	jackson-databind@2.12.3	2.12.6	1