StackRadar

CVE-2026-54516

Medium

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
103
of 17,781 indexed, latest versions
Container images
98
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind's renamed @JsonIgnore'd setters can deserialize via private fields

Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 98 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.21.0, 2.21.1, 2.21.2, 2.21.3+5 more2.21.4, 3.1.498
OSV records
GHSA-9fxm-vc8v-hj55

Charts affected

103 by stars
ChartLatestAffected imagesRadar Score
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
jackson-databind@2.21.2
2.21.4

Open the chart page →

1,885
kafka-connectdasmeta1.0.21 of 3See more

kafka-connect dasmeta 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
confluentinc/cp-schema-registry:latestf0cfd047a839
jackson-databind@2.21.2
2.21.4

Open the chart page →

532
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.6.39b0330756022
jackson-databind@2.21.2
2.21.4

Open the chart page →

4,586
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
jackson-databind@2.21.1
2.21.4

Open the chart page →

1,159
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
consensys/teku:latest3a4f5761ae1c
jackson-databind@3.1.0
3.1.4

Open the chart page →

973
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
jackson-databind@2.21.2
2.21.4

Open the chart page →

1,997
eximeebpmseximeebpms-k8sOfficialVerified publisher0.3.01 of 1See more

eximeebpms eximeebpms-k8s 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/eximeebpms/eximeebpms-bpm-platform:run-1.3.0acb8dbce38fd
jackson-databind@3.0.4
3.1.4

Open the chart page →

727
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-databind@2.21.2
2.21.4

Open the chart page →

3,463
edge-ncipfolio-org0.1.281 of 1See more

edge-ncip folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/edge-ncip:lateste760dbb81d1a
jackson-databind@3.1.0
3.1.4

Open the chart page →

820
edge-oai-pmhfolio-org0.1.311 of 1See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/edge-oai-pmh:latesteedfcbc29792
jackson-databind@3.1.0
3.1.4

Open the chart page →

874
edge-ordersfolio-org0.1.301 of 1See more

edge-orders folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/edge-orders:latest1ef654ee9f23
jackson-databind@3.1.0
3.1.4

Open the chart page →

735
edge-patronfolio-org0.1.281 of 1See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/edge-patron:latest682b852e056d
jackson-databind@3.1.0
3.1.4

Open the chart page →

905
edge-rtacfolio-org0.1.281 of 1See more

edge-rtac folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/edge-rtac:latest15ef73b1abd0
jackson-databind@3.0.4
3.1.4

Open the chart page →

1,259
mod-data-exportfolio-org0.1.401 of 1See more

mod-data-export folio-org 0.1.40

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-data-export:latest0cc86bf09755
jackson-databind@3.0.4
3.1.4

Open the chart page →

1,393
mod-data-export-springfolio-org0.1.41 of 1See more

mod-data-export-spring folio-org 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-data-export-spring:latestf1d7caf4544b
jackson-databind@3.0.4
3.1.4

Open the chart page →

1,253
mod-data-export-workerfolio-org0.1.151 of 1See more

mod-data-export-worker folio-org 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-data-export-worker:latest1ad1811c9b37
jackson-databind@3.0.4
3.1.4

Open the chart page →

1,214
mod-ebsconetfolio-org0.1.31 of 1See more

mod-ebsconet folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-ebsconet:latest3ae8cb99daa3
jackson-databind@3.1.0
3.1.4

Open the chart page →

1,203
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@3.1.3
3.1.4

Open the chart page →

1,760
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
jackson-databind@2.21.2
2.21.4

Open the chart page →

1,088
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
jackson-databind@3.1.3
3.1.4

Open the chart page →

665
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jackson-databind@2.21.3
2.21.4

Open the chart page →

4,556
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jackson-databind@2.21.0
2.21.4

Open the chart page →

3,199
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
alfio/alf.io:2.0-M5-26060c836a081446
jackson-databind@2.21.2
2.21.4

Open the chart page →

2,091
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,639
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
jackson-databind@2.21.3
2.21.4

Open the chart page →

26,612
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

57,669
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
jackson-databind@2.21.2
2.21.4

Open the chart page →

15,089
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,423
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
jackson-databind@2.21.1
2.21.4

Open the chart page →

3,818
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
jackson-databind@2.21.2
2.21.4

Open the chart page →

7,944
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
jackson-databind@2.21.3
2.21.4

Open the chart page →

2,024
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
jackson-databind@2.21.3
2.21.4

Open the chart page →

1,158
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,253
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,253
unifiqaoruVerified publisher1.1.21 of 2See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
jackson-databind@2.21.2
2.21.4

Open the chart page →

3,642
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
jackson-databind@3.1.2
3.1.4

Open the chart page →

6,207
keycloakself-hosters-by-nightVerified publisher0.1.11 of 1See more

keycloak self-hosters-by-night 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.60aae0de7fca8
jackson-databind@2.21.2
2.21.4

Open the chart page →

518
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
jackson-databind@2.21.2
2.21.4

Open the chart page →

5,201
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
jackson-databind@3.1.1
3.1.4

Open the chart page →

3,003
hazelcaststakaterVerified publisher1.0.21 of 1See more

hazelcast stakater 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
hazelcast/hazelcast:latestf086bf0ecb23
jackson-databind@2.21.2
2.21.4

Open the chart page →

1,702
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
jackson-databind@2.21.1
2.21.4

Open the chart page →

1,825
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,423
openunison-operatortremolo3.0.301 of 1See more

openunison-operator tremolo 3.0.30

1 of the 1 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
jackson-databind@2.21.3
2.21.4

Open the chart page →

2,126
orchestratremolo3.1.552 of 5See more

orchestra tremolo 3.1.55

2 of the 5 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
jackson-databind@2.21.3
2.21.4
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
jackson-databind@2.21.3
2.21.4

Open the chart page →

7,637
kafkatwomartensVerified publisher0.2.11 of 2See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54516.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:latest0ad069035863
jackson-databind@2.21.2
2.21.4

Open the chart page →

1,551

Container images carrying it

98 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
graylog/graylog:7.1.9598bd41fefd5
jackson-databind@2.21.2
2.21.4
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jackson-databind@2.21.2
2.21.4
1
gridgain/gridgain9:9.1.1895018390077b
jackson-databind@2.21.0
2.21.4
1
hazelcast/hazelcast:latestf086bf0ecb23
jackson-databind@2.21.2
2.21.4
1
itzg/bungeecord:latest1c59f9631f3b
jackson-databind@3.1.3
3.1.4
1
itzg/minecraft-server:2026.9.04e29d14082d9
jackson-databind@3.1.3
3.1.4
1
itzg/minecraft-server:latest8672e335dbef
jackson-databind@3.1.3
3.1.4
1
library/convertigo:8.4.3ae605bfcda05
jackson-databind@2.21.3
2.21.4
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.4
1
library/neo4j:2026.05.06c162e2432f8
jackson-databind@2.21.3
2.21.4
1
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
jackson-databind@2.21.2
2.21.4
1
opennms/sentinel:36.0.288869082a14f
jackson-databind@2.21.3
2.21.4
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
jackson-databind@2.21.2
2.21.4
1
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-databind@2.21.0
2.21.4
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-databind@2.21.0
2.21.4
1
reportportal/service-api:5.15.4bf193091525a
jackson-databind@2.21.2
2.21.4
1
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-databind@2.21.1
2.21.4
1
siakhooi/query:1.0.0f1f4b5b1b870
jackson-databind@3.1.0
3.1.4
1
softwaremill/bootzooka:latest845b5e8f8056
jackson-databind@3.1.1
3.1.4
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-databind@3.1.3
3.1.4
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
jackson-databind@2.21.2
2.21.4
1
trinodb/trino:4801565e8cac299
jackson-databind@2.21.2
2.21.4
1
trinodb/trino:4815b5e0a97f599
jackson-databind@2.21.3
2.21.4
1
ghcr.io/eximeebpms/eximeebpms-bpm-platform:run-1.3.0acb8dbce38fd
jackson-databind@3.0.4
3.1.4
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
jackson-databind@3.1.0
3.1.4
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
jackson-databind@2.21.2
2.21.4
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
jackson-databind@2.21.2
2.21.4
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
jackson-databind@3.1.2
3.1.4
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
jackson-databind@2.21.2
2.21.4
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
jackson-databind@2.21.2
2.21.4
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
jackson-databind@2.21.2
2.21.4
1
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
jackson-databind@2.21.2
2.21.4
1
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
jackson-databind@2.21.2
2.21.4
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
jackson-databind@3.1.3
3.1.4
1
ghcr.io/jfwenisch/ipfix-generator:latesta1b05567dbf6
jackson-databind@2.21.2
2.21.4
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
jackson-databind@2.21.1
2.21.4
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
jackson-databind@2.21.2
2.21.4
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
jackson-databind@2.21.2
2.21.4
1
ghcr.io/open-telemetry/demo:3.0.0-fraud-detection1cdfd1bcf476
jackson-databind@2.21.2
2.21.4
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
jackson-databind@2.21.2
2.21.4
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
jackson-databind@2.21.3
2.21.4
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
jackson-databind@3.1.2
3.1.4
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
jackson-databind@2.21.2
2.21.4
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
jackson-databind@2.21.3
2.21.4
1
quay.io/keycloak/keycloak:26.60aae0de7fca8
jackson-databind@2.21.2
2.21.4
1
quay.io/keycloak/keycloak:26.6.39b0330756022
jackson-databind@2.21.2
2.21.4
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
jackson-databind@2.21.2
2.21.4
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
jackson-databind@2.21.2
2.21.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.