StackRadar

CVE-2026-83557

Medium

Advisory

Published 28 Sept 2026In the index since 29 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
897
of 17,939 indexed, latest versions
Container images
888
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)

Carried by container images the latest versions of 897 of 17,939 indexed charts deploy, on 888 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.11.0, 2.11.1, 2.11.2, 2.11.3+72 more2.18.10, 2.21.6, 2.22.2, 3.1.6+1 more888
OSV records
GHSA-gx83-3vf8-gh7j
Trending
Rank 6 in indexed charts, since 29 Sept 2026. See the ranking →

Charts affected

897 by stars
ChartLatestAffected imagesRadar Score
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.18.10

Open the chart page →

1,401
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.31 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.3

1 of the 5 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.6

Open the chart page →

11,333
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
jackson-databind@2.14.1
2.18.10

Open the chart page →

2,105
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
jackson-databind@2.13.2.2
2.18.10

Open the chart page →

8,130
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
jackson-databind@2.14.1
2.18.10
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
jackson-databind@2.15.3
2.18.10
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
jackson-databind@2.15.3
2.18.10
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
jackson-databind@2.15.3
2.18.10

Open the chart page →

103,166
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
jackson-databind@2.15.0
2.18.10

Open the chart page →

13,231
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-databind@2.18.3
2.18.10

Open the chart page →

6,739
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jackson-databind@2.18.6
2.18.10

Open the chart page →

6,302
snowplow-iglu-serversnowplow-devopsOfficialVerified publisher0.19.01 of 1See more

snowplow-iglu-server snowplow-devops 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
jackson-databind@2.14.1
2.18.10

Open the chart page →

278
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jackson-databind@2.16.2
2.18.10

Open the chart page →

2,579
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
jackson-databind@2.13.5
2.18.10
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
jackson-databind@2.15.2
2.18.10
thingsboard/tb-node:3.6.0f40a542832c4
jackson-databind@2.13.4.2
2.18.10

Open the chart page →

15,079
feedbacksystemthm-mni-iiVerified publisher0.48.03 of 14See more

feedbacksystem thm-mni-ii 0.48.0

3 of the 14 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.1b585ab8bb7e8
jackson-databind@2.14.2
2.18.10
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.1baf79539e5df
jackson-databind@2.21.2
2.21.6
ghcr.io/thm-mni-ii/fbs-runner:v2.0.15d7506dce446
jackson-databind@2.14.2
2.18.10

Open the chart page →

25,559
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-databind@2.20.0
2.21.6

Open the chart page →

4,794
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
jackson-databind@2.13.5
2.18.10

Open the chart page →

8,754
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-databind@2.21.1
2.21.6

Open the chart page →

608
keycloak-operatoradfinisVerified publisher1.13.01 of 1See more

keycloak-operator adfinis 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:26.7.268b1e5805b99
jackson-databind@2.21.5
2.21.6

Open the chart page →

107
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
jackson-databind@2.15.2
2.18.10

Open the chart page →

22,217
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-databind@2.21.0
2.21.6
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-databind@2.21.0
2.21.6

Open the chart page →

4,307
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
jackson-databind@2.13.4.2
2.18.10
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
jackson-databind@2.13.4.2
2.18.10

Open the chart page →

19,037
pulsarapache-pulsar-helm-chart-repo1.0.321 of 2See more

pulsar apache-pulsar-helm-chart-repo 1.0.32

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
jackson-databind@2.11.1
2.18.10

Open the chart page →

7,055
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jackson-databind@2.17.2
2.18.10

Open the chart page →

8,227
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
jackson-databind@2.19.2
2.21.6

Open the chart page →

499
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
jackson-databind@2.13.2.2
2.18.10
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
jackson-databind@2.11.1
2.18.10
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
jackson-databind@2.12.6.1
2.18.10

Open the chart page →

18,485
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
jackson-databind@2.11.2
2.18.10

Open the chart page →

10,957
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-databind@2.21.2
2.21.6

Open the chart page →

2,086
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.18.10

Open the chart page →

86,068
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.18.10
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.18.10

Open the chart page →

86,068
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
jackson-databind@2.19.2
2.21.6

Open the chart page →

4,034
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
jackson-databind@2.19.4
2.21.6

Open the chart page →

16,603
kafkacloudpirates-kafkaVerified publisher0.1.71 of 1See more

kafka cloudpirates-kafka 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-databind@2.21.2
2.21.6

Open the chart page →

660
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jackson-databind@2.19.0
2.21.6

Open the chart page →

2,119
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jackson-databind@2.17.0
2.18.10

Open the chart page →

5,781
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
jackson-databind@2.17.2
2.18.10

Open the chart page →

55,809
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
epam/ai-dial-core:latestab297af3bb3e
jackson-databind@2.21.5
2.21.6

Open the chart page →

1,642
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.6

Open the chart page →

4,646
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
jackson-databind@2.21.1
2.21.6

Open the chart page →

1,456
enavenav-service-architectureVerified publisher0.0.79 of 10See more

enav enav-service-architecture 0.0.7

9 of the 10 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
jackson-databind@2.16.2
2.18.10
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
jackson-databind@3.1.0
3.1.6
ghcr.io/gla-rad/enav-aton-admin-service:latestdb495e42fe02
jackson-databind@2.21.2
2.21.6
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
jackson-databind@2.21.2
2.21.6
ghcr.io/gla-rad/enav-aton-service-client:latest27a31b38e8df
jackson-databind@3.1.5
3.1.6
ghcr.io/gla-rad/enav-ckeeper:latest8ac8bc2eda0c
jackson-databind@3.1.5
3.1.6
ghcr.io/gla-rad/enav-eureka:latest05002092c621
jackson-databind@2.21.2
2.21.6
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
jackson-databind@2.21.2
2.21.6
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
jackson-databind@2.21.2
2.21.6

Open the chart page →

13,693
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
jackson-databind@2.11.3
2.18.10

Open the chart page →

2,807
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
jackson-databind@2.21.4
2.21.6

Open the chart page →

1,340
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
jackson-databind@2.20.2
2.21.6

Open the chart page →

1,716
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
jackson-databind@2.21.5
2.21.6

Open the chart page →

840
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
jackson-databind@2.13.0
2.18.10

Open the chart page →

3,425
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
jackson-databind@2.11.2
2.18.10

Open the chart page →

5,425
kpow-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

kpow-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
factorhouse/kpow-ce:96.5b1d5f1eea44c
jackson-databind@3.2.0
3.2.2

Open the chart page →

51
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
jackson-databind@2.17.2
2.18.10
featurehub/edge:1.9.198ad426737f6
jackson-databind@2.17.2
2.18.10
featurehub/mr:1.9.1477d8bf771a9
jackson-databind@2.17.2
2.18.10

Open the chart page →

8,948
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.32 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
jackson-databind@2.13.5
2.18.10
provectuslabs/kafka-ui:latest8f2ff02d64b0
jackson-databind@2.15.2
2.18.10

Open the chart page →

15,180
gluugluu-flexOfficialVerified publisher0.0.0-nightly7 of 9See more

gluu gluu-flex 0.0.0-nightly

7 of the 9 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-databind@2.22.1
2.22.2
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-databind@2.22.1
2.22.2

Open the chart page →

1,592
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-databind@2.12.3
2.18.10

Open the chart page →

3,425
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
jackson-databind@2.16.0
2.18.10

Open the chart page →

4,731
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-83557.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
jackson-databind@2.15.3
2.18.10

Open the chart page →

14,107

Container images carrying it

888 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.10
80
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.6
20
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
jackson-databind@2.14.1
2.18.10
13
codeurjc/server:v1.0310bea5b1ee7
jackson-databind@2.13.4.2
2.18.10
8
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
jackson-databind@2.21.2
2.21.6
7
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.10
5
quay.io/keycloak/keycloak:26.7.482a77884f3af
jackson-databind@2.21.5
2.21.6
5
guacamole/guacamole:1.6.0f344085e618b
jackson-databind@2.19.0
2.21.6
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
jackson-databind@2.13.2.2
2.18.10
4
mastercloudapps/planner:v1.2340a950b311b2
jackson-databind@2.13.0
2.18.10
4
mastercloudapps/server:v2.23f3d24dfe2686
jackson-databind@2.13.4.2
2.18.10
4
oscarsotosanchez/toposervice:v1.0d4d020e9f272
jackson-databind@2.11.3
2.18.10
4
provectuslabs/kafka-ui:latest8f2ff02d64b0
jackson-databind@2.15.2
2.18.10
4
quay.io/strimzi/operator:0.37.052f376e64b9b
jackson-databind@2.15.2
2.18.10
4
codeurjc/planner:v1.0800cf520c245
jackson-databind@2.13.0
2.18.10
3
gchq/hdfs:3.3.35ec58edbb2db
jackson-databind@2.13.2.2
2.18.10
3
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-databind@2.17.2
2.18.10
3
jacobalberty/unifi:v10.0.162896c0ab82d33
jackson-databind@2.17.3
2.18.10
3
library/solr:8.11.18c5f7881cebb
jackson-databind@2.12.3
2.18.10
3
library/zookeeper:3.9.57d0f24ebb67b
jackson-databind@2.15.2
2.18.10
3
mockserver/mockserver:5.15.0:mockserver-5.15.00f9ef78c9489
jackson-databind@2.14.1
2.18.10
3
pavanelthepu/todo-api:1.0.2f47658e3b24c
jackson-databind@2.12.3
2.18.10
3
signoz/zookeeper:3.7.1fcc4a3288154
jackson-databind@2.13.2.1
2.18.10
3
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-databind@2.12.7.1
2.18.10
3
ghcr.io/quenchworks/images/keycloakff8d99f4b5f0
jackson-databind@2.21.5
2.21.6
3
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.6_local:latest8b9208c09d76
jackson-databind@2.18.9
2.18.10
3
airbyte/workload-launcher:2.3.00e18b1abcda6
jackson-databind@2.21.5
2.21.6
2
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
jackson-databind@2.11.2
2.18.10
2
apache/druid:37.0.00116fb802786
jackson-databind@2.19.2
2.21.6
2
apache/fineract:1.12.1a83cf1980609
jackson-databind@2.18.3
2.18.10
2
apache/kafka:4.3.177e3df905404
jackson-databind@2.21.2
2.21.6
2
apache/nifi-registry:1.26.07cdfd8deec92
jackson-databind@2.17.0
2.18.10
2
apachepulsar/pulsar:2.6.14db6ff0b4045
jackson-databind@2.11.1
2.18.10
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-databind@2.18.3
2.18.10
2
apache/tika:2.9.0.092d055a84e9e
jackson-databind@2.15.2
2.18.10
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
jackson-databind@2.17.0
2.18.10
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jackson-databind@2.15.0
2.18.10
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
jackson-databind@2.15.2
2.18.10
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jackson-databind@2.13.4.2
2.18.10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
jackson-databind@2.16.2
2.18.10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jackson-databind@2.13.4.2
2.18.10
2
datagrok/grok_connect:latestf5876d3aebb8
jackson-databind@2.18.9
2.18.10
2
dependencytrack/apiserver:4.6.3485ac0952c02
jackson-databind@2.13.4
2.18.10
2
dina1993/airports-api:latestac731244aed1
jackson-databind@2.14.2
2.18.10
2
dina1993/airports-consumer:latest669d146a5e63
jackson-databind@2.14.2
2.18.10
2
dina1993/airports-producer:latest3d6b0dac1cb4
jackson-databind@2.14.2
2.18.10
2
frinx/sample-topology:6.1.01a19658415b6
jackson-databind@2.15.4
2.18.10
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.10
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.10
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.10
2

syft 1.42.1 · advisories as of 29 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.