StackRadarChart IndexLive demo

CVE-2026-59889

Medium

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 224; of 17,781 indexed, latest versions
Container images: 224; deployed by those charts
Fix available: 1 of 1; affected package

jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

Carried by container images the latest versions of 224 of 17,781 indexed charts deploy, on 224 images.

Affected package	Affected versions	Fixed in	Images
jackson-databindmaven	2.18.0, 2.18.1, 2.18.2, 2.18.3+17 more	2.18.9, 2.21.5, 2.22.1, 3.1.5+1 more	224

OSV records: GHSA-5gvw-p9qm-jgwh

Charts affected

224 by stars

Chart

Latest

Affected images

Radar Score

fineractfineract-openshift

1 of 4 See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
apache/fineract :1.12.1	a83cf1980609	jackson-databind@2.18.3	2.18.9

Open the chart page →

7,792

flyteconnectorflyte

1 of 1 See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	jackson-databind@2.21.2	2.21.5

Open the chart page →

3,463

edge-caiasoftfolio-org

1 of 1 See more

edge-caiasoft folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-caiasoft :latest	c3cfa89eee2f	jackson-databind@2.21.4	2.21.5

Open the chart page →

525

edge-connexionfolio-org

1 of 1 See more

edge-connexion folio-org 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-connexion :latest	b4863d135524	jackson-databind@2.18.2	2.18.9

Open the chart page →

1,132

edge-dematicfolio-org

1 of 1 See more

edge-dematic folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-dematic :latest	48c9b1d180d4	jackson-databind@3.1.4	3.1.5

Open the chart page →

525

edge-inn-reachfolio-org

1 of 1 See more

edge-inn-reach folio-org 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-inn-reach :latest	c64e4d9dd3fc	jackson-databind@3.1.4	3.1.5

Open the chart page →

525

edge-ncipfolio-org

1 of 1 See more

edge-ncip folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-ncip :latest	e760dbb81d1a	jackson-databind@2.18.2	2.18.9

Open the chart page →

820

edge-oai-pmhfolio-org

1 of 1 See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-oai-pmh :latest	eedfcbc29792	jackson-databind@2.18.2	2.18.9

Open the chart page →

874

edge-ordersfolio-org

1 of 1 See more

edge-orders folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-orders :latest	1ef654ee9f23	jackson-databind@2.18.6	2.18.9

Open the chart page →

735

edge-patronfolio-org

1 of 1 See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-patron :latest	682b852e056d	jackson-databind@3.1.0	3.1.5

Open the chart page →

905

edge-rtacfolio-org

1 of 1 See more

edge-rtac folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-rtac :latest	15ef73b1abd0	jackson-databind@3.0.4	3.1.5

Open the chart page →

1,259

edge-sip2folio-org

1 of 1 See more

edge-sip2 folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/edge-sip2 :latest	86106f20ef51	jackson-databind@2.21.4	2.21.5

Open the chart page →

253

mod-agreementsfolio-org

1 of 1 See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-agreements :latest	29c3f233a498	jackson-databind@2.22.0	2.22.1

Open the chart page →

1,874

mod-auditfolio-org

1 of 1 See more

mod-audit folio-org 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-audit :latest	88f40730ed45	jackson-databind@3.1.4	3.1.5

Open the chart page →

267

mod-calendarfolio-org

1 of 1 See more

mod-calendar folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-calendar :latest	22f65982efd7	jackson-databind@3.1.4	3.1.5

Open the chart page →

415

mod-circulationfolio-org

1 of 1 See more

mod-circulation folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-circulation :latest	3eecd2ac2d8a	jackson-databind@2.18.6	2.18.9

Open the chart page →

497

mod-circulation-storagefolio-org

1 of 1 See more

mod-circulation-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-circulation-storage :latest	6bdddcafbc0f	jackson-databind@2.18.6	2.18.9

Open the chart page →

658

mod-configurationfolio-org

1 of 1 See more

mod-configuration folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-configuration :latest	dd0cdc89670a	jackson-databind@2.18.6	2.18.9

Open the chart page →

711

mod-copycatfolio-org

1 of 1 See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-copycat :latest	1513fad2b799	jackson-databind@2.18.6	2.18.9

Open the chart page →

1,466

mod-coursesfolio-org

1 of 1 See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-courses :latest	68ca414f5596	jackson-databind@2.18.2	2.18.9

Open the chart page →

1,533

mod-data-exportfolio-org

1 of 1 See more

mod-data-export folio-org 0.1.40

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-data-export :latest	0cc86bf09755	jackson-databind@3.0.4	3.1.5

Open the chart page →

1,393

mod-data-export-springfolio-org

1 of 1 See more

mod-data-export-spring folio-org 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-data-export-spring :latest	f1d7caf4544b	jackson-databind@3.0.4	3.1.5

Open the chart page →

1,253

mod-data-export-workerfolio-org

1 of 1 See more

mod-data-export-worker folio-org 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-data-export-worker :latest	1ad1811c9b37	jackson-databind@3.0.4	3.1.5

Open the chart page →

1,214

mod-ebsconetfolio-org

1 of 1 See more

mod-ebsconet folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-ebsconet :latest	3ae8cb99daa3	jackson-databind@3.1.0	3.1.5

Open the chart page →

1,203

mod-emailfolio-org

1 of 1 See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-email :latest	79ea8e2e7ebf	jackson-databind@2.18.2	2.18.9

Open the chart page →

866

mod-erm-usage-harvesterfolio-org

1 of 1 See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-erm-usage-harvester :latest	2d6767933c59	jackson-databind@2.18.6	2.18.9

Open the chart page →

563

mod-event-configfolio-org

1 of 1 See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-event-config :latest	0192adad3897	jackson-databind@3.1.4	3.1.5

Open the chart page →

420

mod-feesfinesfolio-org

1 of 1 See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-feesfines :latest	fe3a7049f2fb	jackson-databind@2.18.2	2.18.9

Open the chart page →

663

mod-financefolio-org

1 of 1 See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-finance :latest	14450bc15430	jackson-databind@2.21.4	2.21.5

Open the chart page →

534

mod-finance-storagefolio-org

1 of 1 See more

mod-finance-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-finance-storage :latest	4bc4057abaea	jackson-databind@3.1.4	3.1.5

Open the chart page →

413

mod-inn-reachfolio-org

1 of 1 See more

mod-inn-reach folio-org 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-inn-reach :latest	cc8584e43382	jackson-databind@3.1.4	3.1.5

Open the chart page →

512

mod-inventory-updatefolio-org

1 of 1 See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-inventory-update :latest	ba84812b4d58	jackson-databind@2.18.2	2.18.9

Open the chart page →

878

mod-invoicefolio-org

1 of 1 See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-invoice :latest	45b7b13e81e1	jackson-databind@3.1.4	3.1.5

Open the chart page →

568

mod-licensesfolio-org

1 of 1 See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-licenses :latest	cfd6109bf477	jackson-databind@2.18.7	2.18.9

Open the chart page →

1,760

mod-login-samlfolio-org

1 of 1 See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-login-saml :latest	5f3358ccaa0f	jackson-databind@2.21.2	2.21.5

Open the chart page →

1,088

mod-notifyfolio-org

1 of 1 See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-notify :latest	a8c1a90005fc	jackson-databind@3.1.4	3.1.5

Open the chart page →

271

mod-oafolio-org

1 of 1 See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-oa :latest	ae3b069d4ba5	jackson-databind@2.18.7	2.18.9

Open the chart page →

1,733

mod-oai-pmhfolio-org

1 of 1 See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-oai-pmh :latest	5cd5ef063f2a	jackson-databind@2.18.2	2.18.9

Open the chart page →

962

mod-ordersfolio-org

1 of 1 See more

mod-orders folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-orders :latest	fc4528220fb8	jackson-databind@3.1.4	3.1.5

Open the chart page →

456

mod-orders-storagefolio-org

1 of 1 See more

mod-orders-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-orders-storage :latest	ceeaacc3bf16	jackson-databind@3.1.4	3.1.5

Open the chart page →

442

mod-organizationsfolio-org

1 of 1 See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-organizations :latest	7dc9ccf3d937	jackson-databind@2.18.6	2.18.9

Open the chart page →

808

mod-organizations-storagefolio-org

1 of 1 See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-organizations-storage :latest	e46892405fde	jackson-databind@2.21.4	2.21.5

Open the chart page →

665

mod-password-validatorfolio-org

1 of 1 See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-password-validator :latest	b31d75f2bf7b	jackson-databind@3.1.4	3.1.5

Open the chart page →

394

mod-patronfolio-org

1 of 1 See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-patron :latest	5f213acfe2f8	jackson-databind@2.18.2	2.18.9

Open the chart page →

827

mod-permissionsfolio-org

1 of 1 See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-permissions :latest	5363e98c6299	jackson-databind@2.18.6	2.18.9

Open the chart page →

1,214

mod-pubsubfolio-org

1 of 1 See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-pubsub :latest	0a4fa4ad5d72	jackson-databind@2.18.6	2.18.9

Open the chart page →

1,009

mod-remote-storagefolio-org

1 of 1 See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-remote-storage :latest	4f12177123dc	jackson-databind@2.21.4	2.21.5

Open the chart page →

571

mod-rtacfolio-org

1 of 1 See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-rtac :latest	c959b2d6142f	jackson-databind@2.18.2	2.18.9

Open the chart page →

665

mod-senderfolio-org

1 of 1 See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-sender :latest	d88a675dddf0	jackson-databind@2.18.2	2.18.9

Open the chart page →

818

mod-serials-managementfolio-org

1 of 1 See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59889.

Container image	Digest	Package	Fixed in
folioci/mod-serials-management :latest	571fa1ffe8c9	jackson-databind@2.18.7	2.18.9

Open the chart page →

1,733

Container images carrying it

224 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubelauncher/keycloak	afe3bd73d7cf	jackson-databind@2.21.2	2.21.5	1
ghcr.io/openccu/openccu :3.89.8.20260719	b2de2ff6e8e0	jackson-databind@2.18.2	2.18.9	1
ghcr.io/open-telemetry/demo :3.0.0-kafka	0601750a3ca4	jackson-databind@2.21.2	2.21.5	1
ghcr.io/open-telemetry/demo :3.0.0-fraud-detection	1cdfd1bcf476	jackson-databind@2.21.2	2.21.5	1
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	jackson-databind@2.21.2	2.21.5	1
ghcr.io/openunison/openunison-k8s :1.0.50	9ad450220ab9	jackson-databind@2.21.3	2.21.5	1
ghcr.io/projectnessie/nessie :0.108.4	c0f42874c810	jackson-databind@2.22.0	2.22.1	1
ghcr.io/quenchworks/images/jenkins	e92dba4e78c5	jackson-databind@2.22.0	2.22.1	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	jackson-databind@3.1.2	3.1.5	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	jackson-databind@2.21.2	2.21.5	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	jackson-databind@2.22.0	2.22.1	1
ghcr.io/wenisch-tech/chronoreaper :1.1.10	447726cec07b	jackson-databind@2.21.3	2.21.5	1
ghcr.io/wenisch-tech/proxera :0.12.20	5ac0e9f6b42f	jackson-databind@2.21.4	2.21.5	1
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	jackson-databind@2.18.2	2.18.9	1
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	jackson-databind@2.22.0	2.22.1	1
quay.io/keycloak/keycloak :26.6	0aae0de7fca8	jackson-databind@2.21.2	2.21.5	1
quay.io/keycloak/keycloak :26.3.3	6a7217a100bd	jackson-databind@2.18.2	2.18.9	1
quay.io/keycloak/keycloak :26.6.3	9b0330756022	jackson-databind@2.21.2	2.21.5	1
quay.io/maximilianopizarro/custom-rhcl-console :dns-prober-v0.1.2	1a592ee6651a	jackson-databind@2.21.2	2.21.5	1
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	jackson-databind@2.21.4	2.21.5	1
quay.io/maximilianopizarro/showroom-docs-mcp :latest	1a6eff92827a	jackson-databind@2.21.2	2.21.5	1
quay.io/poundex/tekton-ci-environment-injector :0.2.4	6dd65f22949c	jackson-databind@2.21.4	2.21.5	1
quay.io/poundex/tekton-stash-and-cache :0.2.2	e854423caa09	jackson-databind@2.21.4	2.21.5	1
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	jackson-databind@2.22.0	2.22.1	1