StackRadar

CVE-2026-0603

High

Advisory

Published 23 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,781 indexed, latest versions
Container images
68
deployed by those charts
Fix available
None
affected package

Hibernate vulnerable to SQL Injection

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 68 images.

Affected packageAffected versionsFixed inImages
hibernate-coremaven5.2.17.Final, 5.3.2.Final, 5.3.10.Final, 5.3.20.Final+20 moreno fix listed68
OSV records
GHSA-2p5w-cvg5-gc5c

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
hibernate-core@5.3.24.Final
no fix listed

Open the chart page →

7,713
spring-petclinic-cloudplatform9-communityVerified publisher0.2.03 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

3 of the 6 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
platform9community/customers-service:latest2089811e5cc6
hibernate-core@5.4.17.Final
no fix listed
platform9community/vets-service:latestd1165c94dfb3
hibernate-core@5.4.17.Final
no fix listed
platform9community/visits-service:latest8d11b50368c6
hibernate-core@5.4.17.Final
no fix listed

Open the chart page →

41,872
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

13,953
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
hibernate-core@5.4.17.Final
no fix listed

Open the chart page →

6,711
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

28,534
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
hibernate-core@5.4.24.Final
no fix listed

Open the chart page →

4,679
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
hibernate-core@5.4.8.Final
no fix listed

Open the chart page →

19,187
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

37,373
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
zbalogh/reservation-api-server:1.0.97c247e399a1f
hibernate-core@5.6.11.Final
no fix listed

Open the chart page →

6,639
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
hibernate-core@5.3.24.Final
no fix listed

Open the chart page →

7,713
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
hibernate-core@5.4.8.Final
no fix listed

Open the chart page →

19,745
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
hibernate-core@5.3.24.Final
no fix listed

Open the chart page →

13,352
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
hibernate-core@5.6.12.Final
no fix listed

Open the chart page →

9,722
url-shortenerbeastob1.0.21 of 3See more

url-shortener beastob 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
beastob/url-shortener:1.0.299a49885ab33
hibernate-core@5.4.32.Final
no fix listed

Open the chart page →

3,607
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
robotshop/rs-shipping:latest89753ab48919
hibernate-core@5.4.20.Final
no fix listed

Open the chart page →

29,555
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

6,915
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
hibernate-core@5.6.10.Final
no fix listed

Open the chart page →

11,482
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

32,205
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
hibernate-core@5.4.32.Final
no fix listed

Open the chart page →

7,691
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
hibernate-core@5.6.10.Final
no fix listed

Open the chart page →

7,019
mod-agreementsfolio-org0.1.321 of 1See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
folioci/mod-agreements:latest29c3f233a498
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,874
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,760
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,733
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,733
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
hibernate-core@5.4.17.Final
no fix listed

Open the chart page →

17,702
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
hibernate-core@5.4.27.Final
no fix listed

Open the chart page →

26,944
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
hibernate-core@5.4.27.Final
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
hibernate-core@5.6.7.Final
no fix listed

Open the chart page →

34,754
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
hibernate-core@5.2.17.Final
no fix listed

Open the chart page →

6,451
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
dannielkil/book-backend:lateste3b479a55a69
hibernate-core@5.6.10.Final
no fix listed

Open the chart page →

9,122
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,721
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
hibernate-core@5.6.11.Final
no fix listed

Open the chart page →

7,826
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
hibernate-core@5.3.10.Final
no fix listed

Open the chart page →

7,498
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat56490ac14a31
hibernate-core@5.6.15.Final
no fix listed

Open the chart page →

1,595
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
hibernate-core@5.4.18.Final
no fix listed

Open the chart page →

10,264
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
hibernate-core@5.4.32.Final
no fix listed

Open the chart page →

5,663
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
hibernate-core@5.6.11.Final
no fix listed

Open the chart page →

8,928
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
hibernate-core@5.6.14.Final
no fix listed

Open the chart page →

27,721
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
hibernate-core@5.6.9.Final
no fix listed

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
hibernate-core@5.6.9.Final
no fix listed

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-0603.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
hibernate-core@5.6.9.Final
no fix listed

Open the chart page →

5,916

Container images carrying it

68 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
thingsboard/tb-node:3.4.1645f43b688f7
hibernate-core@5.6.9.Final
no fix listed
1
thingsboard/tb-node:3.6.0f40a542832c4
hibernate-core@5.6.15.Final
no fix listed
1
thmmniii/fbs-core:v1.27.15438517d9fc2
hibernate-core@5.6.15.Final
no fix listed
1
torrespro/mca-worker:2.0.06d3bd305a1ba
hibernate-core@5.4.8.Final
no fix listed
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
hibernate-core@5.6.9.Final
no fix listed
1
vlebediantsev/logic-ms:latestdf8bf38c535b
hibernate-core@5.6.9.Final
no fix listed
1
vlebediantsev/registration-ms-final:latest427af418b75e
hibernate-core@5.6.9.Final
no fix listed
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
hibernate-core@5.6.9.Final
no fix listed
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
hibernate-core@5.6.14.Final
no fix listed
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
hibernate-core@5.6.11.Final
no fix listed
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
hibernate-core@5.6.11.Final
no fix listed
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
hibernate-core@5.4.17.Final
no fix listed
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
hibernate-core@5.6.11.Final
no fix listed
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
hibernate-core@5.6.15.Final
no fix listed
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
hibernate-core@5.3.10.Final
no fix listed
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
hibernate-core@5.3.20.Final
no fix listed
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
hibernate-core@5.6.12.Final
no fix listed
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
hibernate-core@5.6.14.Final
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.