StackRadar

CVE-2026-54514

Medium

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
870
of 17,787 indexed, latest versions
Container images
874
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)

Carried by container images the latest versions of 870 of 17,787 indexed charts deploy, on 874 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.0.5, 2.2.3, 2.3.0, 2.3.3+105 more2.18.8, 2.21.4, 3.1.4874
OSV records
GHSA-hgj6-7826-r7m5

Charts affected

870 by stars
ChartLatestAffected imagesRadar Score
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
jackson-databind@2.17.2
2.18.8

Open the chart page →

2,097
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,253
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
jackson-databind@2.9.8
2.18.8

Open the chart page →

5,596
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
todo-apipb-todo-api-v10.1.01 of 2See more

todo-api pb-todo-api-v1 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
jackson-databind@2.12.3
2.18.8

Open the chart page →

2,544
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
jackson-databind@2.4.0
2.18.8

Open the chart page →

6,237
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
jackson-databind@2.13.4
2.18.8

Open the chart page →

7,576
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jackson-databind@2.9.4
2.18.8

Open the chart page →

4,177
Practica_4_helmpr04helm0.1.03 of 7See more

Practica_4_helm pr04helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
jackson-databind@2.13.4.2
2.18.8
codeurjc/toposervice:v1.09fb4c11e6a49
jackson-databind@2.14.1
2.18.8
pcarrascoponce/planner:v1.0981fc482442c
jackson-databind@2.13.0
2.18.8

Open the chart page →

27,558
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
jackson-databind@2.11.3
2.18.8
slagattollas/toposervice-practica:latestdc63973dae0d
jackson-databind@2.11.3
2.18.8

Open the chart page →

28,484
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.8

Open the chart page →

20,190
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
jackson-databind@2.15.0
2.18.8

Open the chart page →

3,277
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jackson-databind@2.9.5
2.18.8

Open the chart page →

9,606
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
jackson-databind@2.20.1
2.21.4

Open the chart page →

2,264
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
jackson-databind@2.13.3
2.18.8

Open the chart page →

2,564
prometheus-cloudwatch-exporterprometheus-worawutchan0.12.01 of 1See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
jackson-databind@2.9.10.1
2.18.8

Open the chart page →

2,831
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jackson-databind@2.14.1
2.18.8

Open the chart page →

1,995
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,253
unifiqaoruVerified publisher1.1.21 of 2See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
jackson-databind@2.21.2
2.21.4

Open the chart page →

3,642
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
jackson-databind@2.4.0
2.18.8
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
jackson-databind@2.17.2
2.18.8

Open the chart page →

21,211
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
jackson-databind@2.20.2
2.21.4

Open the chart page →

2,036
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
jackson-databind@2.20.2
2.21.4

Open the chart page →

2,418
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
jackson-databind@2.20.2
2.21.4

Open the chart page →

2,019
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
jackson-databind@2.16.1
2.18.8

Open the chart page →

3,182
mockserverradar-baseVerified publisher5.15.01 of 1See more

mockserver radar-base 5.15.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
jackson-databind@2.14.1
2.18.8

Open the chart page →

1,257
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jackson-databind@2.14.2
2.18.8

Open the chart page →

5,269
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
jackson-databind@2.20.2
2.21.4

Open the chart page →

2,284
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
jackson-databind@2.16.1
2.18.8

Open the chart page →

2,855
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jackson-databind@2.18.3
2.18.8

Open the chart page →

4,219
radar-mockserverradar-baseVerified publisher0.1.31 of 1See more

radar-mockserver radar-base 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
jackson-databind@2.14.1
2.18.8

Open the chart page →

1,257
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
jackson-databind@2.20.2
2.21.4

Open the chart page →

2,465
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
jackson-databind@2.16.1
2.18.8

Open the chart page →

3,018
radar-upload-connect-backendradar-baseVerified publisher0.9.11 of 1See more

radar-upload-connect-backend radar-base 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-54514.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
jackson-databind@2.19.2
2.21.4

Open the chart page →

2,532

Container images carrying it

874 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jacobalberty/unifi:v7.1.664a3616625dda
jackson-databind@2.13.1
2.18.8
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
jackson-databind@2.13.3
2.18.8
1
jacobalberty/unifi:5.10.19c409924e2463
jackson-databind@2.9.7
2.18.8
1
javaaurelio/dadosfake_web_springboot:latest8541a3cd021a
jackson-databind@2.15.3
2.18.8
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
jackson-databind@2.17.0
2.18.8
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
jackson-databind@2.17.0
2.18.8
1
jhidalgo3/spring-echo-example:lateste08733191ea0
jackson-databind@2.11.4
2.18.8
1
jhipster/jhipster-registry:latest7184525acd4d
jackson-databind@2.13.3
2.18.8
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
jackson-databind@2.10.5
2.18.8
1
just1not2/streama:1.10.48a2305192dec
jackson-databind@2.3.3
2.18.8
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jackson-databind@2.16.2
2.18.8
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jackson-databind@2.16.0
2.18.8
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jackson-databind@2.16.0
2.18.8
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jackson-databind@2.16.0
2.18.8
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jackson-databind@2.17.2
2.18.8
1
kimb88/hello-world-spring-boot:latest0639155241cb
jackson-databind@2.9.6
2.18.8
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
jackson-databind@2.11.3
2.18.8
1
kubebb/gateway-api:v5.6.04d062f20309c
jackson-databind@2.13.4
2.18.8
1
kubebb/mesh-api:v5.7.0a3879931dfa1
jackson-databind@2.13.3
2.18.8
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
jackson-databind@2.17.1
2.18.8
1
kyso/imagebox:latest68091eace89c
jackson-databind@2.9.8
2.18.8
1
ladeit/ladeit:latest962b665ffe82
jackson-databind@2.9.7
2.18.8
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.18.8
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.18.8
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.18.8
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
jackson-databind@2.13.1
2.18.8
1
lavandadelpatio/tmdb:latestded9377636e9
jackson-databind@2.15.3
2.18.8
1
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.18.8
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
jackson-databind@2.14.2
2.18.8
1
library/cassandra:4.0093ee8ee5eb2
jackson-databind@2.19.2
2.21.4
1
library/cassandra:3.11.10b095ff3248c6
jackson-databind@2.9.10.4
2.18.8
1
library/convertigo:8.4.3ae605bfcda05
jackson-databind@2.21.3
2.21.4
1
library/couchdb:3.4.22817ad50b5c5
jackson-databind@2.17.2
2.18.8
1
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.18.8
1
library/elasticsearch:8.17.32cc40b15dff8
jackson-databind@2.15.0
2.18.8
1
library/elasticsearch:8.15.0310b9fc03b06
jackson-databind@2.15.0
2.18.8
1
library/elasticsearch:7.17.0332c6d416808
jackson-databind@2.10.4
2.18.8
1
library/elasticsearch:7.17.1588c2ec10c7f2
jackson-databind@2.14.2
2.18.8
1
library/elasticsearch:9.5.38d09295845fe
jackson-databind@2.19.2
2.21.4
1
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.19.2
2.21.4
1
library/elasticsearch:7.17.8fdc73b3249c1
jackson-databind@2.10.4
2.18.8
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jackson-databind@2.10.1
2.18.8
1
library/logstash:7.17.817a4f64e9cf5
jackson-databind@2.9.10.8
2.18.8
1
library/logstash:9.1.233eae14f0867
jackson-databind@2.16.2
2.18.8
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.4
1
library/neo4j:4.2.4348e3f56faa2
jackson-databind@2.11.3
2.18.8
1
library/neo4j:4.4.43c9fea42bd5a
jackson-databind@2.12.4
2.18.8
1
library/neo4j:2026.02.25ab4ab0358cf
jackson-databind@2.20.1
2.21.4
1
library/neo4j:2026.05.06c162e2432f8
jackson-databind@2.21.3
2.21.4
1
library/neo4j:5.18.18f01f7bb053e
jackson-databind@2.16.1
2.18.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.