StackRadar

CVE-2026-59888

Medium

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
380
of 17,781 indexed, latest versions
Container images
390
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

Carried by container images the latest versions of 380 of 17,781 indexed charts deploy, on 390 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.15.0, 2.15.1, 2.15.2, 2.15.3+31 more2.18.8, 2.21.4, 3.1.4390
OSV records
GHSA-3pjw-73gf-8qr5

Charts affected

380 by stars
ChartLatestAffected imagesRadar Score
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jackson-databind@2.19.2
2.21.4
library/zookeeper:3.9.5f258365d4882
jackson-databind@2.15.2
2.18.8

Open the chart page →

8,541
elasticsearchhelmforgeVerified publisher1.1.81 of 2See more

elasticsearch helmforge 1.1.8

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.38d09295845fe
jackson-databind@2.19.2
2.21.4

Open the chart page →

280
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
kibanahelmforgeVerified publisher1.1.71 of 3See more

kibana helmforge 1.1.7

1 of the 3 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.19.2
2.21.4

Open the chart page →

341
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,639
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
jackson-databind@2.15.2
2.18.8

Open the chart page →

3,103
openbashelm-openbasVerified publisher1.8.142 of 7See more

openbas helm-openbas 1.8.14

2 of the 7 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
jackson-databind@2.17.3
2.18.8
opensearchproject/opensearch:3.3.2798cf28e226a
jackson-databind@2.17.1
2.18.8

Open the chart page →

25,017
hivemq-edgehivemqOfficialVerified publisher0.1.351 of 1See more

hivemq-edge hivemq 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.13aba306d1f089
jackson-databind@2.19.2
2.21.4

Open the chart page →

1,203
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
jackson-databind@2.21.3
2.21.4

Open the chart page →

26,612
sys-info-web-env-view-serverhuajuan-helm-charts0.1.11 of 2See more

sys-info-web-env-view-server huajuan-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
huajuan6848/env-view-server:0.0.1-SNAPSHOTa303f3d9f6e0
jackson-databind@2.15.2
2.18.8

Open the chart page →

1,989
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

57,669
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/zookeeper:3.8-temurin55d1e5b2e601
jackson-databind@2.15.2
2.18.8

Open the chart page →

37,671
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
jackson-databind@2.17.1
2.18.8

Open the chart page →

5,320
appswitcher-serverit-at-mOfficialVerified publisher2.0.21 of 1See more

appswitcher-server it-at-m 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
jackson-databind@2.18.3
2.18.8

Open the chart page →

3,774
daveit-at-mOfficialVerified publisher0.2.152 of 11See more

dave it-at-m 0.2.15

2 of the 11 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jackson-databind@2.15.0
2.18.8
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
jackson-databind@2.21.2
2.21.4

Open the chart page →

15,089
kf-app-eaiit-at-mOfficialVerified publisher0.1.71 of 1See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
jackson-databind@2.19.2
2.21.4

Open the chart page →

1,947
zammad-ldap-syncit-at-mVerified publisher0.6.51 of 1See more

zammad-ldap-sync it-at-m 0.6.5

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
jackson-databind@2.18.2
2.18.8

Open the chart page →

1,345
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
jackson-databind@2.19.2
2.21.4

Open the chart page →

6,122
opencloudjacobcolvinVerified publisher0.2.32 of 13See more

opencloud jacobcolvin 0.2.3

2 of the 13 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
jackson-databind@2.17.0
2.18.8
quay.io/keycloak/keycloak:26.1.4044a457e0498
jackson-databind@2.17.2
2.18.8

Open the chart page →

45,239
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
jackson-databind@2.18.1
2.18.8

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
jackson-databind@2.18.1
2.18.8

Open the chart page →

6,568
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jackson-databind@2.17.0
2.18.8

Open the chart page →

63,461
k8sforjavak8sforjava0.1.01 of 1See more

k8sforjava k8sforjava 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
vincentgwzhang/k8sforjava:latesta9139f2cd98f
jackson-databind@2.18.2
2.18.8

Open the chart page →

1,476
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
jackson-databind@2.17.3
2.18.8

Open the chart page →

7,268
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
jackson-databind@2.15.0
2.18.8

Open the chart page →

3,576
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

2,476
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
jackson-databind@2.15.2
2.18.8

Open the chart page →

16,877
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
jackson-databind@2.17.2
2.18.8

Open the chart page →

3,104
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
jackson-databind@2.17.1
2.18.8

Open the chart page →

3,334
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
jackson-databind@2.17.1
2.18.8

Open the chart page →

7,802
mock-oidclabs64io-helm-chartsVerified publisher0.1.01 of 1See more

mock-oidc labs64io-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
jackson-databind@2.17.2
2.18.8

Open the chart page →

703
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.4

Open the chart page →

4,423
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
jackson-databind@2.18.1
2.18.8

Open the chart page →

3,131
tmdbluiscajl0.2.41 of 1See more

tmdb luiscajl 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:latestded9377636e9
jackson-databind@2.15.3
2.18.8

Open the chart page →

2,234
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
jackson-databind@2.21.1
2.21.4

Open the chart page →

3,818
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
jackson-databind@2.21.2
2.21.4

Open the chart page →

7,944
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
jackson-databind@2.17.1
2.18.8

Open the chart page →

2,589
activemqmicroboxlabs3.8.01 of 1See more

activemq microboxlabs 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
alfresco/alfresco-activemq:5.18.7-jre17-rockylinux85472f88d9b0b
jackson-databind@2.18.2
2.18.8

Open the chart page →

1,494
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
jackson-databind@2.15.0
2.18.8

Open the chart page →

4,257
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
jackson-databind@2.20.1
2.21.4

Open the chart page →

1,937
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
jackson-databind@2.19.2
2.21.4

Open the chart page →

1,261
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
jackson-databind@2.15.2
2.18.8

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
jackson-databind@2.15.2
2.18.8

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
jackson-databind@2.15.2
2.18.8

Open the chart page →

4,599
verapdfmlohrVerified publisher1.4.01 of 1See more

verapdf mlohr 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
verapdf/rest:v1.30.2341359ac6af5
jackson-databind@2.19.2
2.21.4

Open the chart page →

492
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
jackson-databind@2.15.2
2.18.8

Open the chart page →

16,198
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jackson-databind@2.17.0
2.18.8

Open the chart page →

30,363
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
jackson-databind@2.20.1
2.21.4

Open the chart page →

3,687
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-59888.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
jackson-databind@2.19.2
2.21.4

Open the chart page →

2,901

Container images carrying it

390 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-kafka:latest0ad069035863
jackson-databind@2.21.2
2.21.4
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
jackson-databind@2.16.2
2.18.8
1
confluentinc/cp-schema-registry:latestf0cfd047a839
jackson-databind@2.21.2
2.21.4
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
jackson-databind@2.16.2
2.18.8
1
consensys/teku:latest3a4f5761ae1c
jackson-databind@3.1.0
3.1.4
1
consensys/teku:25.4.1bf6ecd2ea716
jackson-databind@2.18.3
2.18.8
1
consensys/web3signer:latestf146a51a1ba3
jackson-databind@2.21.2
2.21.4
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
jackson-databind@2.15.2
2.18.8
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
jackson-databind@2.21.1
2.21.4
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
jackson-databind@2.20.0
2.21.4
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
jackson-databind@2.15.4
2.18.8
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
jackson-databind@2.15.4
2.18.8
1
eginnovations/agent:7.5.4e4dfe242fe9f
jackson-databind@2.21.1
2.21.4
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
jackson-databind@2.21.1
2.21.4
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
jackson-databind@2.18.0
2.18.8
1
erudikaltd/scoold:1.66.0949c56b57e8f
jackson-databind@2.20.2
2.21.4
1
esperotech/yaade:latest24d2d692d948
jackson-databind@2.15.3
2.18.8
1
fabioformosa/hello-world-api:latest063873af085c
jackson-databind@2.18.3
2.18.8
1
featurehub/dacha2:1.9.1c8d5551b5e40
jackson-databind@2.17.2
2.18.8
1
featurehub/edge:1.9.198ad426737f6
jackson-databind@2.17.2
2.18.8
1
featurehub/mr:1.9.1477d8bf771a9
jackson-databind@2.17.2
2.18.8
1
flowable/flowable-rest:7.1.0b7ae287502cd
jackson-databind@2.17.2
2.18.8
1
folioci/edge-connexion:latestb4863d135524
jackson-databind@2.18.2
2.18.8
1
folioci/edge-ncip:lateste760dbb81d1a
jackson-databind@2.18.2
2.18.8
1
folioci/edge-oai-pmh:latesteedfcbc29792
jackson-databind@2.18.2
2.18.8
1
folioci/edge-orders:latest1ef654ee9f23
jackson-databind@2.18.6
2.18.8
1
folioci/edge-patron:latest682b852e056d
jackson-databind@3.1.0
3.1.4
1
folioci/edge-rtac:latest15ef73b1abd0
jackson-databind@3.0.4
3.1.4
1
folioci/mod-authtoken:latest995a25a33133
jackson-databind@2.16.1
2.18.8
1
folioci/mod-circulation:latest3eecd2ac2d8a
jackson-databind@2.18.6
2.18.8
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
jackson-databind@2.18.6
2.18.8
1
folioci/mod-configuration:latestdd0cdc89670a
jackson-databind@2.18.6
2.18.8
1
folioci/mod-copycat:latest1513fad2b799
jackson-databind@2.18.6
2.18.8
1
folioci/mod-courses:latest68ca414f5596
jackson-databind@2.18.2
2.18.8
1
folioci/mod-data-export:latest0cc86bf09755
jackson-databind@2.20.2
2.21.4
1
folioci/mod-data-export-spring:latestf1d7caf4544b
jackson-databind@3.0.4
3.1.4
1
folioci/mod-data-export-worker:latest1ad1811c9b37
jackson-databind@3.0.4
3.1.4
1
folioci/mod-ebsconet:latest3ae8cb99daa3
jackson-databind@2.20.2
2.21.4
1
folioci/mod-email:latest79ea8e2e7ebf
jackson-databind@2.18.2
2.18.8
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
jackson-databind@2.18.6
2.18.8
1
folioci/mod-feesfines:latestfe3a7049f2fb
jackson-databind@2.18.2
2.18.8
1
folioci/mod-gobi:latestc58c989dac44
jackson-databind@2.20.1
2.21.4
1
folioci/mod-inventory-update:latestba84812b4d58
jackson-databind@2.18.2
2.18.8
1
folioci/mod-ldp:latestb55696fd9065
jackson-databind@2.15.4
2.18.8
1
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@2.18.7
2.18.8
1
folioci/mod-login:latest88de493f86db
jackson-databind@2.16.1
2.18.8
1
folioci/mod-login-saml:latest5f3358ccaa0f
jackson-databind@2.21.2
2.21.4
1
folioci/mod-oa:latestae3b069d4ba5
jackson-databind@2.18.7
2.18.8
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
jackson-databind@2.18.2
2.18.8
1
folioci/mod-organizations:latest7dc9ccf3d937
jackson-databind@2.18.6
2.18.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.