StackRadar

CVE-2026-50193

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
403
of 17,781 indexed, latest versions
Container images
343
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 343 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.10.0, 2.10.1, 2.10.2, 2.10.3+28 more2.14.0343
OSV records
GHSA-3wrr-7qpf-2prh

Charts affected

403 by stars
ChartLatestAffected imagesRadar Score
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2026-50193.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
jackson-databind@2.10.5
2.14.0

Open the chart page →

6,213
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-50193.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
jackson-databind@2.13.4.2
2.14.0

Open the chart page →

5,846
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-50193.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jackson-databind@2.13.4.2
2.14.0

Open the chart page →

6,016

Container images carrying it

343 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
elastictranscoder/transcoder:627e21dcb4a0327029e6
jackson-databind@2.12.3
2.14.0
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
jackson-databind@2.12.3
2.14.0
1
emeraldpay/dshackle:0.14.0126f0ae0b388
jackson-databind@2.11.0
2.14.0
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
jackson-databind@2.11.0
2.14.0
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
jackson-databind@2.10.4
2.14.0
1
expediagroup/pitchfork:1.314f2cf61e7de9
jackson-databind@2.13.0
2.14.0
1
farberg/apache-knox-docker:1.6.14b4a22487394
jackson-databind@2.11.4
2.14.0
1
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
jackson-databind@2.13.4.2
2.14.0
1
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
jackson-databind@2.13.4.2
2.14.0
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
jackson-databind@2.11.2
2.14.0
1
fimperato/static-src-info-data-transformation:1.0.5-RELEASEdf05c388ea6c
jackson-databind@2.13.4.2
2.14.0
1
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
jackson-databind@2.13.4.2
2.14.0
1
fiware/mintaka:0.7.092a3c5cf43c0
jackson-databind@2.13.4
2.14.0
1
fiware/mintaka:latestefc6793388cc
jackson-databind@2.13.4
2.14.0
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
jackson-databind@2.10.0
2.14.0
1
flofree/base-project:2.1.16b6486c5f81e
jackson-databind@2.13.5
2.14.0
1
flyway/flyway:9.1545b5d7cdc75a
jackson-databind@2.13.4.2
2.14.0
1
flyway/flyway:9.14.1-alpine80f12c80502b
jackson-databind@2.13.4.2
2.14.0
1
folioci/mod-aes:latest6d67e9564270
jackson-databind@2.11.3
2.14.0
1
folioci/mod-agreements:latest29c3f233a498
jackson-databind@2.11.1
2.14.0
1
folioci/mod-codex-ekb:latest235a3fa4adc9
jackson-databind@2.13.2.1
2.14.0
1
folioci/mod-codex-inventory:latest6d53ed758fd1
jackson-databind@2.11.3
2.14.0
1
folioci/mod-codex-mux:latestd4138abfd30d
jackson-databind@2.13.4
2.14.0
1
folioci/mod-data-import-converter-storage:latest3028f333778f
jackson-databind@2.13.4
2.14.0
1
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@2.11.1
2.14.0
1
folioci/mod-oa:latestae3b069d4ba5
jackson-databind@2.11.1
2.14.0
1
folioci/mod-serials-management:latest571fa1ffe8c9
jackson-databind@2.11.1
2.14.0
1
folioci/mod-service-interaction:latestf53c327a48e8
jackson-databind@2.11.1
2.14.0
1
fonoster/routr:1.0.0-rc52ca65af17cbc
jackson-databind@2.10.0
2.14.0
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
jackson-databind@2.13.3
2.14.0
1
franrobles8/planner:v3.099985392d63c
jackson-databind@2.11.3
2.14.0
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
jackson-databind@2.11.4
2.14.0
1
fthomas/scala-steward:latest367afe974b7a
jackson-databind@2.12.7.1
2.14.0
1
gchq/accumulo:2.0.1c460bb587d6d
jackson-databind@2.13.2.2
2.14.0
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jackson-databind@2.11.4
2.14.0
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
jackson-databind@2.11.2
2.14.0
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
jackson-databind@2.11.2
2.14.0
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
jackson-databind@2.11.2
2.14.0
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
jackson-databind@2.11.2
2.14.0
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
jackson-databind@2.11.2
2.14.0
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
jackson-databind@2.11.2
2.14.0
1
gluufederation/opendj:4.3.0_011a1128b28b95
jackson-databind@2.11.1
2.14.0
1
gotson/komga:0.99.49b15ea6bfc30
jackson-databind@2.12.3
2.14.0
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
jackson-databind@2.13.4.2
2.14.0
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
jackson-databind@2.13.4.2
2.14.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
jackson-databind@2.13.2.2
2.14.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
jackson-databind@2.13.2.2
2.14.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
jackson-databind@2.13.2.2
2.14.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
jackson-databind@2.13.2.2
2.14.0
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
jackson-databind@2.13.2.2
2.14.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.