StackRadar

CVE-2026-89407

High

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
464
of 17,985 indexed, latest versions
Container images
493
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()

Carried by container images the latest versions of 464 of 17,985 indexed charts deploy, on 493 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.17.0, 2.17.1, 2.17.2, 2.17.3+37 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more493
OSV records
GHSA-p6pp-m3f8-5c89

Charts affected

464 by stars
ChartLatestAffected imagesRadar Score
nexus3stevehipwell-helm-charts-nexus3Verified publisher5.26.21 of 2See more

nexus3 stevehipwell-helm-charts-nexus3 5.26.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
sonatype/nexus3:3.96.4-ubi78e56e6a05d0
jackson-core@3.2.1
3.2.2

Open the chart page →

85
reposilitevolker-raschekVerified publisher1.0.11 of 1See more

reposilite volker-raschek 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-core@2.22.2
2.22.3

Open the chart page →

1,235
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
jackson-core@2.21.0
2.21.7
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
jackson-core@2.21.0
2.21.7

Open the chart page →

13,634
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
jackson-core@2.18.2
2.18.11

Open the chart page →

1,260
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-core@2.18.4.1
2.18.11

Open the chart page →

5,829
convertigoconvertigoOfficialVerified publisher8.4.52 of 5See more

convertigo convertigo 8.4.5

2 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/convertigo:8.4.50594b19f2596
jackson-core@2.22.1
2.22.3
library/couchdb:3.58cf5f8442585
jackson-core@2.21.0
2.21.7

Open the chart page →

16,348
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
jackson-core@2.19.2
2.21.7

Open the chart page →

31,714
cosmotech-apicosmotech-apiVerified publisher5.3.01 of 1See more

cosmotech-api cosmotech-api 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.0b9d7cb4aa93d
jackson-core@2.22.1
2.22.3

Open the chart page →

172
ejbca-ceejbcaOfficialVerified publisher9.6.31 of 1See more

ejbca-ce ejbca 9.6.3

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
jackson-core@2.20.1
2.21.7

Open the chart page →

1,095
flexfactorhouseOfficialVerified publisher1.0.821 of 1See more

flex factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex:96.53130791de3e7
jackson-core@2.22.2
2.22.3

Open the chart page →

51
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
jackson-core@2.17.2
2.18.11

Open the chart page →

2,985
flyte-binaryflyte2.0.501 of 4See more

flyte-binary flyte 2.0.50

1 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-core@2.21.2
2.21.7

Open the chart page →

4,627
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
jackson-core@2.18.3
2.18.11

Open the chart page →

1,548
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-core@2.21.2
2.21.7
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-core@2.21.2
2.21.7

Open the chart page →

5,303
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
hazelcasthazelcastVerified publisher5.10.32 of 2See more

hazelcast hazelcast 5.10.3

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-core@2.17.2
2.18.11
hazelcast/management-center:5.5.29241de019fc7
jackson-core@2.17.2
2.18.11

Open the chart page →

2,962
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.21.11 of 5See more

infrahub-enterprise infrahub-enterprise 4.21.1

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-core@2.21.3
2.21.7

Open the chart page →

12,095
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
metabase/metabase:latest0ad51a232989
jackson-core@2.21.6
2.21.7

Open the chart page →

101
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
jackson-core@2.18.1
2.18.11
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-core@2.18.3
2.18.11

Open the chart page →

6,914
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jackson-core@2.18.6
2.18.11

Open the chart page →

6,677
feedbacksystemthm-mni-iiVerified publisher0.48.11 of 14See more

feedbacksystem thm-mni-ii 0.48.1

1 of the 14 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.699b9f84726fa
jackson-core@2.21.2
2.21.7

Open the chart page →

25,093
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-core@2.20.0
2.21.7

Open the chart page →

4,945
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-core@2.21.1
2.21.7

Open the chart page →

670
keycloak-operatoradfinisVerified publisher1.13.11 of 1See more

keycloak-operator adfinis 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:26.7.406a13deb3919
jackson-core@2.21.5
2.21.7

Open the chart page →

122
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-core@2.21.0
2.21.7
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-core@2.21.0
2.21.7

Open the chart page →

4,529
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jackson-core@2.17.0
2.18.11

Open the chart page →

8,418
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
jackson-core@2.19.2
2.21.7

Open the chart page →

628
arcadedbarcadedb26.9.11 of 1See more

arcadedb arcadedb 26.9.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
arcadedata/arcadedb:26.9.102a1a74fcef3
jackson-core@2.22.2
2.22.3

Open the chart page →

108
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
jackson-core@2.19.2
2.21.7

Open the chart page →

4,157
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
jackson-core@2.19.4
2.21.7

Open the chart page →

17,157
kafkacloudpirates-kafkaVerified publisher0.2.01 of 1See more

kafka cloudpirates-kafka 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jackson-core@2.19.0
2.21.7

Open the chart page →

2,195
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jackson-core@2.17.0
2.18.11

Open the chart page →

5,917
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
jackson-core@2.17.2
2.18.11

Open the chart page →

57,170
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
epam/ai-dial-core:latestab297af3bb3e
jackson-core@2.21.5
2.21.7

Open the chart page →

1,831
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-core@2.20.1
2.21.7

Open the chart page →

4,872
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
jackson-core@2.22.0
2.22.3

Open the chart page →

1,507
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-admin-service:latestdb495e42fe02
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
jackson-core@3.1.2
3.1.7
ghcr.io/gla-rad/enav-aton-service-client:latest27a31b38e8df
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-ckeeper:latest8ac8bc2eda0c
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-eureka:latest05002092c621
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
jackson-core@2.21.2
2.21.7

Open the chart page →

14,168
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
jackson-core@3.1.4
3.1.7

Open the chart page →

1,517
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
jackson-core@3.0.4
3.1.7

Open the chart page →

1,774
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
jackson-core@2.21.5
2.21.7

Open the chart page →

958
flex-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

flex-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex-ce:96.5aca809915ca2
jackson-core@2.22.2
2.22.3

Open the chart page →

51
kpow-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

kpow-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/kpow-ce:96.5b1d5f1eea44c
jackson-core@3.2.0
3.2.2

Open the chart page →

103
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
jackson-core@2.17.2
2.18.11
featurehub/edge:1.9.198ad426737f6
jackson-core@2.17.2
2.18.11
featurehub/mr:1.9.1477d8bf771a9
jackson-core@2.17.2
2.18.11

Open the chart page →

9,384
gluugluu-flexOfficialVerified publisher0.0.0-nightly7 of 9See more

gluu gluu-flex 0.0.0-nightly

7 of the 9 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-core@2.22.1
2.22.3

Open the chart page →

2,840
amgraviteeioVerified publisher4.12.72 of 3See more

am graviteeio 4.12.7

2 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.77b1cd283ad65
jackson-core@2.22.2
2.22.3
graviteeio/am-management-api:4.12.72a34f5148687
jackson-core@2.22.2
2.22.3

Open the chart page →

2,157
hazelcast-enterprisehazelcastVerified publisher5.15.22 of 2See more

hazelcast-enterprise hazelcast 5.15.2

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast-enterprise:5.7.1a69287322081
jackson-core@2.22.0
2.22.3
hazelcast/management-center:5.11.185514eca4b1c
jackson-core@3.1.5
3.1.7

Open the chart page →

344
guacamolehelmforgeVerified publisher1.5.31 of 5See more

guacamole helmforge 1.5.3

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7

Open the chart page →

9,331
kafkahelmforgeVerified publisher1.4.01 of 1See more

kafka helmforge 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712

Container images carrying it

493 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/quenchworks/images/trino9b3f2f1d90ac
jackson-core@2.22.1
2.22.3
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
jackson-core@2.19.0
2.21.7
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
jackson-core@2.17.2
2.18.11
2
quay.io/keycloak/keycloak-operator:26.7.33172bf49511c
jackson-core@2.21.5
2.21.7
2
quay.io/strimzi/drain-cleaner:1.6.15fb28e9f30d0
jackson-core@2.21.2
2.21.7
2
quay.io/strimzi/operator:1.2.077f8fa8121a6
jackson-core@3.1.5
3.1.7
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jackson-core@2.18.3
2.18.11
2
2martens/configserver:latestbf1cdb80239d
jackson-core@2.17.2
2.18.11
1
2martens/timetable:latestbd1ba6ab84c9
jackson-core@2.19.2
2.21.7
1
2martens/wahlrecht:latestba2c3040dab0
jackson-core@2.19.2
2.21.7
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
jackson-core@2.19.4
2.21.7
1
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
jackson-core@2.21.5
2.21.7
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
jackson-core@3.1.2
3.1.7
1
adeptiainc/adeptia-connect-migration:5.2.98607f4f29732
jackson-core@2.19.4
2.21.7
1
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-core@2.21.1
2.21.7
1
adityaprasadpathak/myapp:3.07e3b9777362c
jackson-core@2.17.1
2.18.11
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
jackson-core@2.17.2
2.18.11
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
jackson-core@2.17.1
2.18.11
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
jackson-core@2.18.4.1
2.18.11
1
airbyte/airbyte-api-server:0.63.8e1c5e7cfec8a
jackson-core@2.17.1
2.18.11
1
airbyte/bootloader:2.3.0205b99d17c1a
jackson-core@2.21.5
2.21.7
1
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
jackson-core@2.20.1
2.21.7
1
airbyte/cron:2.3.0bf4835757eaa
jackson-core@2.21.5
2.21.7
1
airbyte/server:2.3.039141ed8ce5e
jackson-core@2.21.5
2.21.7
1
airbyte/worker:2.3.0f2e33fbc53d1
jackson-core@2.21.5
2.21.7
1
airbyte/workload-api-server:2.3.0434b4a811156
jackson-core@2.21.5
2.21.7
1
aktosecurity/akto-api-security-dashboard:latest3ecdd301cdbd
jackson-core@2.18.9
2.18.11
1
aktosecurity/akto-threat-detection-backend:1.18.4b12ce3e2dc71
jackson-core@2.18.9
2.18.11
1
aktosecurity/akto-threat-detection-backend:latestdffb8c3676ef
jackson-core@2.18.9
2.18.11
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
jackson-core@2.18.9
2.18.11
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
jackson-core@2.18.9
2.18.11
1
alfio/alf.io:2.0-M5-26060c836a081446
jackson-core@2.21.2
2.21.7
1
alfresco/alfresco-activemq:5.18.7-jre17-rockylinux88c10693fe71a
jackson-core@2.18.2
2.18.11
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jackson-core@2.18.4.1
2.18.11
1
apache/hertzbeat:1.8.075d48a62748f
jackson-core@2.18.2
2.18.11
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
jackson-core@2.18.2
2.18.11
1
apache/kafka:4.1.0bff074a5d005
jackson-core@2.19.0
2.21.7
1
apache/nifi-registry:1.27.063b8e3e40742
jackson-core@2.17.1
2.18.11
1
apache/polaris:lateste66366e783f1
jackson-core@2.22.0
2.22.3
1
apache/ranger:2.7.076c176e8a0e4
jackson-core@2.17.0
2.18.11
1
apache/tika:latest-full80072bb73dd3
jackson-core@2.22.1
2.22.3
1
apache/tika:3.3.1.090b7fa1dc018
jackson-core@2.21.3
2.21.7
1
apache/tika:3.2.2.0-fullffab324253ed
jackson-core@2.19.2
2.21.7
1
arcadedata/arcadedb:26.9.102a1a74fcef3
jackson-core@2.22.2
2.22.3
1
archivebox/archivebox:0.9.708c21bb233130
jackson-core@2.22.2
2.22.3
1
athou/commafeed:6.2.0-postgresql5e388351df1a
jackson-core@2.20.1
2.21.7
1
atlassian/bamboo:12.1.119160c3bfb73b
jackson-core@2.21.6
2.21.7
1
atlassian/bitbucket:10.2.705933f2b1cfd
jackson-core@2.21.5
2.21.7
1
atlassian/crowd:7.2.351e6d33676f6
jackson-core@2.21.5
2.21.7
1
atlassian/jira-software:11.3.114046f4a668a4
jackson-core@2.21.6
2.21.7
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.