StackRadar

CVE-2022-42003

High

Advisory

Published 3 Oct 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
458
of 17,781 indexed, latest versions
Container images
388
deployed by those charts
Fix available
1 of 1
affected package

Uncontrolled Resource Consumption in Jackson-databind

Carried by container images the latest versions of 458 of 17,781 indexed charts deploy, on 388 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.4.0, 2.5.0, 2.5.3, 2.5.4+60 more2.12.7.1, 2.13.4.2388
OSV records
GHSA-jjjh-jjxp-wpff

Charts affected

458 by stars
ChartLatestAffected imagesRadar Score
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
jackson-databind@2.9.8
2.12.7.1

Open the chart page →

5,596
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
todo-apipb-todo-api-v10.1.01 of 2See more

todo-api pb-todo-api-v1 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
jackson-databind@2.12.3
2.12.7.1

Open the chart page →

2,544
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
jackson-databind@2.4.0
2.12.7.1

Open the chart page →

6,237
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
jackson-databind@2.13.4
2.13.4.2

Open the chart page →

7,576
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jackson-databind@2.9.4
2.12.7.1

Open the chart page →

4,177
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
jackson-databind@2.13.0
2.13.4.2

Open the chart page →

27,558
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
jackson-databind@2.11.3
2.12.7.1
slagattollas/toposervice-practica:latestdc63973dae0d
jackson-databind@2.11.3
2.12.7.1

Open the chart page →

28,484
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jackson-databind@2.9.5
2.12.7.1

Open the chart page →

9,606
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
jackson-databind@2.13.3
2.13.4.2

Open the chart page →

2,564
prometheus-cloudwatch-exporterprometheus-worawutchan0.12.01 of 1See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
jackson-databind@2.9.10.1
2.12.7.1

Open the chart page →

2,831
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
jackson-databind@2.4.0
2.12.7.1

Open the chart page →

21,211
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
authentication-serviceredestroyder0.2.21 of 1See more

authentication-service redestroyder 0.2.2

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
redestroyder/authorization-service:0.0.1740364a619fd
jackson-databind@2.13.1
2.13.4.2

Open the chart page →

2,583
business-serviceredestroyder0.2.11 of 1See more

business-service redestroyder 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
redestroyder/business-service:0.0.1db03499a0726
jackson-databind@2.13.1
2.13.4.2

Open the chart page →

2,600
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
jackson-databind@2.10.2
2.12.7.1
reportportal/service-authorization:5.7.09e73114dbd15
jackson-databind@2.10.2
2.12.7.1
reportportal/service-jobs:5.7.2dc166c58485a
jackson-databind@2.11.4
2.12.7.1

Open the chart page →

25,737
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.12.7.1

Open the chart page →

20,190
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
jackson-databind@2.9.6
2.12.7.1
fonoster/routr-requester:2.13.6e0c823506eb2
jackson-databind@2.9.6
2.12.7.1

Open the chart page →

11,021
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
jackson-databind@2.12.2
2.12.7.1

Open the chart page →

3,978
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2022-42003.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
jackson-databind@2.13.3
2.13.4.2

Open the chart page →

16,101

Container images carrying it

388 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wistefan/mvf:lateste0887302b2d8
jackson-databind@2.12.1
2.12.7.1
1
woojoong/wowza:latestec230db19652
jackson-databind@2.9.0
2.12.7.1
1
xeotek/kadeck:4.2.94c6b04d9ce55
jackson-databind@2.13.3
2.13.4.2
1
yuzutech/kroki:0.17.0192b7b27c857
jackson-databind@2.13.1
2.13.4.2
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
jackson-databind@2.10.4
2.12.7.1
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
jackson-databind@2.13.4
2.13.4.2
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
jackson-databind@2.5.3
2.12.7.1
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
jackson-databind@2.10.2
2.12.7.1
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
jackson-databind@2.10.4
2.12.7.1
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
jackson-databind@2.10.0
2.12.7.1
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
jackson-databind@2.4.0
2.12.7.1
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
jackson-databind@2.13.2.2
2.13.4.2
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jackson-databind@2.11.1
2.12.7.1
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
jackson-databind@2.11.4
2.12.7.1
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
jackson-databind@2.13.4
2.13.4.2
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
jackson-databind@2.9.8
2.12.7.1
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
jackson-databind@2.12.7
2.12.7.1
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
jackson-databind@2.11.4
2.12.7.1
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
jackson-databind@2.11.4
2.12.7.1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
jackson-databind@2.11.0
2.12.7.1
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.4.0
2.12.7.1
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
jackson-databind@2.11.4
2.12.7.1
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
jackson-databind@2.13.4
2.13.4.2
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
jackson-databind@2.9.10
2.12.7.1
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
jackson-databind@2.9.9
2.12.7.1
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
jackson-databind@2.4.0
2.12.7.1
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jackson-databind@2.9.8
2.12.7.1
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
jackson-databind@2.9.8
2.12.7.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
jackson-databind@2.12.0
2.12.7.1
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
jackson-databind@2.12.5
2.12.7.1
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
jackson-databind@2.13.2.2
2.13.4.2
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
jackson-databind@2.12.4
2.12.7.1
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
jackson-databind@2.12.4
2.12.7.1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jackson-databind@2.12.1
2.12.7.1
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
jackson-databind@2.11.4
2.12.7.1
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jackson-databind@2.13.3
2.13.4.2
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jackson-databind@2.10.1
2.12.7.1
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-databind@2.12.3
2.12.7.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.