StackRadar

CVE-2026-19032

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,003
of 17,957 indexed, latest versions
Container images
999
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution

Carried by container images the latest versions of 1,003 of 17,957 indexed charts deploy, on 999 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.8.1, 2.8.4, 2.8.6, 2.8.7+105 more2.18.10, 2.21.6, 2.22.2, 3.1.6+1 more999
OSV records
GHSA-wjgm-6hv5-3cvf
Trending
Rank 2 in indexed charts, since 29 Sept 2026. See the ranking →

Charts affected

1,003 by stars
ChartLatestAffected imagesRadar Score
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
jackson-databind@2.13.3
2.18.10

Open the chart page →

6,653
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
jackson-databind@2.13.3
2.18.10

Open the chart page →

5,660
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
jackson-databind@2.13.3
2.18.10

Open the chart page →

5,617
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
jackson-databind@2.10.3
2.18.10

Open the chart page →

3,671
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
jackson-databind@2.11.3
2.18.10

Open the chart page →

3,317
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
jackson-databind@2.15.2
2.18.10

Open the chart page →

2,266
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
jackson-databind@2.17.0
2.18.10

Open the chart page →

6,025
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.13.0
2.18.10

Open the chart page →

8,623
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
jackson-databind@2.14.2
2.18.10

Open the chart page →

9,782
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
jackson-databind@2.15.2
2.18.10
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
jackson-databind@2.15.2
2.18.10
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
jackson-databind@2.15.2
2.18.10

Open the chart page →

19,183
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
jackson-databind@2.14.0-rc1
2.18.10

Open the chart page →

6,441
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
jackson-databind@2.18.3
2.18.10

Open the chart page →

6,953
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
jackson-databind@2.15.2
2.18.10

Open the chart page →

2,550
mockserveropen-charts1.1.01 of 1See more

mockserver open-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
mockserver/mockserver:5.15.00f9ef78c9489
jackson-databind@2.14.1
2.18.10

Open the chart page →

1,338
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
jackson-databind@2.9.5
2.18.10

Open the chart page →

64,817
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
jackson-databind@2.9.0
2.18.10

Open the chart page →

43,860
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jackson-databind@2.10.2
2.18.10

Open the chart page →

13,246
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
jackson-databind@2.9.5
2.18.10

Open the chart page →

6,340
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
jackson-databind@2.9.6
2.18.10
voltha/voltha-onos:5.1.8e038acb950d3
jackson-databind@2.10.0
2.18.10

Open the chart page →

41,899
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
jackson-databind@2.21.3
2.21.6

Open the chart page →

2,287
bpjstk-serviceopenshift1.0.05 of 6See more

bpjstk-service openshift 1.0.0

5 of the 6 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
jackson-databind@2.13.5
2.18.10
andrianrf/bpjstk-service:latest46abe878d9d8
jackson-databind@2.11.2
2.18.10
andrianrf/bpjstk-simulator:latestb63fdb51d39d
jackson-databind@2.11.2
2.18.10
andrianrf/iso-client:latestba560086ce15
jackson-databind@2.11.2
2.18.10
andrianrf/iso-server:latest7da47f525c7d
jackson-databind@2.11.0
2.18.10

Open the chart page →

35,491
cp-cmfopenshift2.4.11 of 1See more

cp-cmf openshift 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
confluentinc/cp-cmf:2.4.1f466f8649aa8
jackson-databind@2.21.5
2.21.6

Open the chart page →

259
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
jackson-databind@2.18.3
2.18.10

Open the chart page →

7,650
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
jackson-databind@2.13.5
2.18.10

Open the chart page →

3,098
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

13,847
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

11,984
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

13,807
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

13,789
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

13,694
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

13,334
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
jackson-databind@2.21.4
2.21.6

Open the chart page →

2,229
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
jackson-databind@2.10.1
2.18.10

Open the chart page →

105,835
operatonoperatonVerified publisher1.0.51 of 1See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
operaton/operaton:1.0.0-beta-4b35867ffe4d8
jackson-databind@2.18.3
2.18.10

Open the chart page →

2,230
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
jackson-databind@2.9.9.3
2.18.10

Open the chart page →

26,770
opsmx-autopilotopsmxVerified publisher2.0.01 of 2See more

opsmx-autopilot opsmx 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opsmxdev/ubi8-autopilot:v2.9.10-202006181240c7e4ea797f11
jackson-databind@2.9.4
2.18.10

Open the chart page →

39,822
rest-appopsmxVerified publisher0.1.01 of 1See more

rest-app opsmx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opsmx11/restapp:0.1.0c76b995be1fb
jackson-databind@2.9.7
2.18.10

Open the chart page →

5,568
trinoopstty0.2.141 of 1See more

trino opstty 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
jackson-databind@2.21.3
2.21.6

Open the chart page →

1,304
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
jackson-databind@2.16.1
2.18.10

Open the chart page →

1,400
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
jackson-databind@2.18.2
2.18.10

Open the chart page →

226,811
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
jackson-databind@2.17.0
2.18.10

Open the chart page →

1,411
p4p40.1.03 of 7See more

p4 p4 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
jackson-databind@2.14.1
2.18.10
mastercloudapps/planner:v1.2340a950b311b2
jackson-databind@2.13.0
2.18.10
mastercloudapps/server:v2.23f3d24dfe2686
jackson-databind@2.13.4.2
2.18.10

Open the chart page →

28,822
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
jackson-databind@2.10.0
2.18.10

Open the chart page →

20,412
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
jackson-databind@2.11.4
2.18.10

Open the chart page →

10,597
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19032.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10

Open the chart page →

20,574

Container images carrying it

999 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kubebb/gateway-api:v5.6.04d062f20309c
jackson-databind@2.13.4
2.18.10
1
kubebb/mesh-api:v5.7.0a3879931dfa1
jackson-databind@2.13.3
2.18.10
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
jackson-databind@2.17.1
2.18.10
1
kyso/imagebox:latest68091eace89c
jackson-databind@2.9.8
2.18.10
1
labs64/auditflow400b18c5aa54
jackson-databind@3.1.5
3.1.6
1
labs64/payment-gateway:0.0.10c66feefca17
jackson-databind@2.21.4
2.21.6
1
ladeit/ladeit:latest962b665ffe82
jackson-databind@2.9.7
2.18.10
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.18.10
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.18.10
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.18.10
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
jackson-databind@2.13.1
2.18.10
1
lavandadelpatio/tmdb:latestded9377636e9
jackson-databind@2.15.3
2.18.10
1
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.18.10
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
jackson-databind@2.14.2
2.18.10
1
library/cassandra:4.03a4876cc7f18
jackson-databind@2.19.2
2.21.6
1
library/cassandra:3.11.10b095ff3248c6
jackson-databind@2.9.10.4
2.18.10
1
library/couchdb:3.58cf5f8442585
jackson-databind@2.21.0
2.21.6
1
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.18.10
1
library/elasticsearch:8.17.32cc40b15dff8
jackson-databind@2.15.0
2.18.10
1
library/elasticsearch:8.15.0310b9fc03b06
jackson-databind@2.15.0
2.18.10
1
library/elasticsearch:7.17.0332c6d416808
jackson-databind@2.10.4
2.18.10
1
library/elasticsearch:7.17.1588c2ec10c7f2
jackson-databind@2.14.2
2.18.10
1
library/elasticsearch:7.16.18d5fd89230d7
jackson-databind@2.10.4
2.18.10
1
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.18.8
2.18.10
1
library/elasticsearch:7.9.1a208e0ba7646
jackson-databind@2.10.4
2.18.10
1
library/elasticsearch:9.5.3a4e2b3d21ad0
jackson-databind@2.21.5
2.21.6
1
library/elasticsearch:7.17.8fdc73b3249c1
jackson-databind@2.10.4
2.18.10
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jackson-databind@2.10.1
2.18.10
1
library/logstash:7.17.817a4f64e9cf5
jackson-databind@2.9.10.8
2.18.10
1
library/logstash:9.1.233eae14f0867
jackson-databind@2.16.2
2.18.10
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.6
1
library/neo4j:4.2.4348e3f56faa2
jackson-databind@2.11.3
2.18.10
1
library/neo4j:4.4.43c9fea42bd5a
jackson-databind@2.12.4
2.18.10
1
library/neo4j:2026.02.25ab4ab0358cf
jackson-databind@2.20.1
2.21.6
1
library/neo4j:2026.05.06c162e2432f8
jackson-databind@2.21.3
2.21.6
1
library/neo4j:5.18.18f01f7bb053e
jackson-databind@2.16.1
2.18.10
1
library/solr:8.7.0d124efd81fbb
jackson-databind@2.11.2
2.18.10
1
library/sonarqube:10.7.0-community0842dcd4c8f8
jackson-databind@2.17.1
2.18.10
1
library/sonarqube:6.7.6-community0ae5169e3d0f
jackson-databind@2.9.5
2.18.10
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jackson-databind@2.11.4
2.18.10
1
library/sonarqube:8.9.2-community88cd63154d4b
jackson-databind@2.11.4
2.18.10
1
library/sonarqube:8.2-communitya246bc64207e
jackson-databind@2.10.1
2.18.10
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jackson-databind@2.11.3
2.18.10
1
library/sonarqube:8.9-communityeb2f0be32efd
jackson-databind@2.13.2.2
2.18.10
1
library/sonarqube:10.0.0-communityef9723cf4fe4
jackson-databind@2.14.1
2.18.10
1
library/storm:2.4.0bd5d420506d6
jackson-databind@2.10.0
2.18.10
1
library/zookeeper:3.6.24c8a6d3b2338
jackson-databind@2.10.3
2.18.10
1
library/zookeeper:3.8-temurin55d1e5b2e601
jackson-databind@2.15.2
2.18.10
1
library/zookeeper:3.9.4dfa9ba46d14b
jackson-databind@2.15.2
2.18.10
1
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
jackson-databind@2.10.4
2.18.10
1

syft 1.42.1 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.