StackRadar

CVE-2026-89407

High

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
464
of 17,985 indexed, latest versions
Container images
493
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()

Carried by container images the latest versions of 464 of 17,985 indexed charts deploy, on 493 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.17.0, 2.17.1, 2.17.2, 2.17.3+37 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more493
OSV records
GHSA-p6pp-m3f8-5c89

Charts affected

464 by stars
ChartLatestAffected imagesRadar Score
nexus3stevehipwell-helm-charts-nexus3Verified publisher5.26.21 of 2See more

nexus3 stevehipwell-helm-charts-nexus3 5.26.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
sonatype/nexus3:3.96.4-ubi78e56e6a05d0
jackson-core@3.2.1
3.2.2

Open the chart page →

85
reposilitevolker-raschekVerified publisher1.0.11 of 1See more

reposilite volker-raschek 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-core@2.22.2
2.22.3

Open the chart page →

1,235
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
jackson-core@2.21.0
2.21.7
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
jackson-core@2.21.0
2.21.7

Open the chart page →

13,634
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
jackson-core@2.18.2
2.18.11

Open the chart page →

1,260
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-core@2.18.4.1
2.18.11

Open the chart page →

5,829
convertigoconvertigoOfficialVerified publisher8.4.52 of 5See more

convertigo convertigo 8.4.5

2 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/convertigo:8.4.50594b19f2596
jackson-core@2.22.1
2.22.3
library/couchdb:3.58cf5f8442585
jackson-core@2.21.0
2.21.7

Open the chart page →

16,348
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
jackson-core@2.19.2
2.21.7

Open the chart page →

31,714
cosmotech-apicosmotech-apiVerified publisher5.3.01 of 1See more

cosmotech-api cosmotech-api 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.0b9d7cb4aa93d
jackson-core@2.22.1
2.22.3

Open the chart page →

172
ejbca-ceejbcaOfficialVerified publisher9.6.31 of 1See more

ejbca-ce ejbca 9.6.3

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
jackson-core@2.20.1
2.21.7

Open the chart page →

1,095
flexfactorhouseOfficialVerified publisher1.0.821 of 1See more

flex factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex:96.53130791de3e7
jackson-core@2.22.2
2.22.3

Open the chart page →

51
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
jackson-core@2.17.2
2.18.11

Open the chart page →

2,985
flyte-binaryflyte2.0.501 of 4See more

flyte-binary flyte 2.0.50

1 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-core@2.21.2
2.21.7

Open the chart page →

4,627
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
jackson-core@2.18.3
2.18.11

Open the chart page →

1,548
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-core@2.21.2
2.21.7
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-core@2.21.2
2.21.7

Open the chart page →

5,303
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
hazelcasthazelcastVerified publisher5.10.32 of 2See more

hazelcast hazelcast 5.10.3

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-core@2.17.2
2.18.11
hazelcast/management-center:5.5.29241de019fc7
jackson-core@2.17.2
2.18.11

Open the chart page →

2,962
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.21.11 of 5See more

infrahub-enterprise infrahub-enterprise 4.21.1

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-core@2.21.3
2.21.7

Open the chart page →

12,095
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
metabase/metabase:latest0ad51a232989
jackson-core@2.21.6
2.21.7

Open the chart page →

101
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
jackson-core@2.18.1
2.18.11
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-core@2.18.3
2.18.11

Open the chart page →

6,914
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jackson-core@2.18.6
2.18.11

Open the chart page →

6,677
feedbacksystemthm-mni-iiVerified publisher0.48.11 of 14See more

feedbacksystem thm-mni-ii 0.48.1

1 of the 14 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.699b9f84726fa
jackson-core@2.21.2
2.21.7

Open the chart page →

25,093
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-core@2.20.0
2.21.7

Open the chart page →

4,945
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-core@2.21.1
2.21.7

Open the chart page →

670
keycloak-operatoradfinisVerified publisher1.13.11 of 1See more

keycloak-operator adfinis 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:26.7.406a13deb3919
jackson-core@2.21.5
2.21.7

Open the chart page →

122
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-core@2.21.0
2.21.7
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-core@2.21.0
2.21.7

Open the chart page →

4,529
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jackson-core@2.17.0
2.18.11

Open the chart page →

8,418
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
jackson-core@2.19.2
2.21.7

Open the chart page →

628
arcadedbarcadedb26.9.11 of 1See more

arcadedb arcadedb 26.9.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
arcadedata/arcadedb:26.9.102a1a74fcef3
jackson-core@2.22.2
2.22.3

Open the chart page →

108
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
jackson-core@2.19.2
2.21.7

Open the chart page →

4,157
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
jackson-core@2.19.4
2.21.7

Open the chart page →

17,157
kafkacloudpirates-kafkaVerified publisher0.2.01 of 1See more

kafka cloudpirates-kafka 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jackson-core@2.19.0
2.21.7

Open the chart page →

2,195
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jackson-core@2.17.0
2.18.11

Open the chart page →

5,917
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
jackson-core@2.17.2
2.18.11

Open the chart page →

57,170
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
epam/ai-dial-core:latestab297af3bb3e
jackson-core@2.21.5
2.21.7

Open the chart page →

1,831
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-core@2.20.1
2.21.7

Open the chart page →

4,872
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
jackson-core@2.22.0
2.22.3

Open the chart page →

1,507
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-admin-service:latestdb495e42fe02
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
jackson-core@3.1.2
3.1.7
ghcr.io/gla-rad/enav-aton-service-client:latest27a31b38e8df
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-ckeeper:latest8ac8bc2eda0c
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-eureka:latest05002092c621
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
jackson-core@2.21.2
2.21.7

Open the chart page →

14,168
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
jackson-core@3.1.4
3.1.7

Open the chart page →

1,517
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
jackson-core@3.0.4
3.1.7

Open the chart page →

1,774
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
jackson-core@2.21.5
2.21.7

Open the chart page →

958
flex-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

flex-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex-ce:96.5aca809915ca2
jackson-core@2.22.2
2.22.3

Open the chart page →

51
kpow-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

kpow-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/kpow-ce:96.5b1d5f1eea44c
jackson-core@3.2.0
3.2.2

Open the chart page →

103
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
jackson-core@2.17.2
2.18.11
featurehub/edge:1.9.198ad426737f6
jackson-core@2.17.2
2.18.11
featurehub/mr:1.9.1477d8bf771a9
jackson-core@2.17.2
2.18.11

Open the chart page →

9,384
gluugluu-flexOfficialVerified publisher0.0.0-nightly7 of 9See more

gluu gluu-flex 0.0.0-nightly

7 of the 9 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-core@2.22.1
2.22.3

Open the chart page →

2,840
amgraviteeioVerified publisher4.12.72 of 3See more

am graviteeio 4.12.7

2 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.77b1cd283ad65
jackson-core@2.22.2
2.22.3
graviteeio/am-management-api:4.12.72a34f5148687
jackson-core@2.22.2
2.22.3

Open the chart page →

2,157
hazelcast-enterprisehazelcastVerified publisher5.15.22 of 2See more

hazelcast-enterprise hazelcast 5.15.2

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast-enterprise:5.7.1a69287322081
jackson-core@2.22.0
2.22.3
hazelcast/management-center:5.11.185514eca4b1c
jackson-core@3.1.5
3.1.7

Open the chart page →

344
guacamolehelmforgeVerified publisher1.5.31 of 5See more

guacamole helmforge 1.5.3

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7

Open the chart page →

9,331
kafkahelmforgeVerified publisher1.4.01 of 1See more

kafka helmforge 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712

Container images carrying it

493 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
reportportal/service-api:5.15.4bf193091525a
jackson-core@2.21.2
2.21.7
1
reportportal/service-authorization:5.15.16a954407b417
jackson-core@2.21.2
2.21.7
1
reportportal/service-jobs:5.15.299d27d58d6b4
jackson-core@2.21.2
2.21.7
1
resurfaceio/resurface:3.7.84d5cda2f64109
jackson-core@2.18.2
2.18.11
1
rtuszik/photon-docker:2.4.021549c60f9e6
jackson-core@2.22.1
2.22.3
1
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-core@2.21.1
2.21.7
1
sharque/panopticum:v8.4.7b032e41f6af5
jackson-core@2.21.5
2.21.7
1
siakhooi/query:1.0.0f1f4b5b1b870
jackson-core@2.21.2
2.21.7
1
softwaremill/bootzooka:latest845b5e8f8056
jackson-core@3.1.1
3.1.7
1
sonatype/nexus3:3.96.3a406f4e9dc14
jackson-core@3.2.1
3.2.2
1
stardog/stardog:latest2714e5c4b3c1
jackson-core@2.22.1
2.22.3
1
strangebee/thehive:5.8.0-1a7f7b05fba24
jackson-core@2.22.2
2.22.3
1
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-core@2.20.0
2.21.7
1
sysnet4admin/colosseum-agg:logbc25b152d88e
jackson-core@2.18.2
2.18.11
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-core@2.21.4
2.21.7
1
themoah/klag:0.2.187178531ebe86
jackson-core@2.21.6
2.21.7
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
jackson-core@2.21.6
2.21.7
1
thingsboard/tbmq-node:2.4.070661025dba5
jackson-core@2.21.6
2.21.7
1
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-core@2.18.4.1
2.18.11
1
tinymediamanager/tinymediamanager:5.3.36f332431a2ae
jackson-core@2.21.2
2.21.7
1
tock/bot_admin:25.10.7df3e38c77a38
jackson-core@2.20.0
2.21.7
1
tock/bot_api:25.10.7dd5d5c70e333
jackson-core@2.20.0
2.21.7
1
tock/build_worker:25.10.7080cb6b08d5b
jackson-core@2.20.0
2.21.7
1
tock/duckling:25.10.7ac1f3f1a1e9c
jackson-core@2.20.0
2.21.7
1
tock/kotlin_compiler:25.10.7c9c0fb40089a
jackson-core@2.20.0
2.21.7
1
tock/nlp_api:25.10.7c04ffe67b977
jackson-core@2.20.0
2.21.7
1
tolgee/tolgee:v3.224.11170242202255
jackson-core@2.21.6
2.21.7
1
traccar/traccar:6.7-alpine621c8d6d46fd
jackson-core@2.18.2
2.18.11
1
treskon/portrait:DEV-latest88e813f22347
jackson-core@2.17.3
2.18.11
1
trinodb/trino:4801565e8cac299
jackson-core@3.1.0
3.1.7
1
trinodb/trino:45038c6f24ab1a4
jackson-core@2.17.1
2.18.11
1
trinodb/trino:4815b5e0a97f599
jackson-core@2.21.3
2.21.7
1
trinodb/trino:4796af989b0846d
jackson-core@2.20.1
2.21.7
1
trinodb/trino-gateway:2112c884f235aa
jackson-core@2.22.2
2.22.3
1
verapdf/rest:v1.30.2341359ac6af5
jackson-core@2.21.1
2.21.7
1
vespaengine/vespa:8.526.1569b160f58211
jackson-core@2.18.3
2.18.11
1
vincentgwzhang/k8sforjava:latesta9139f2cd98f
jackson-core@2.18.2
2.18.11
1
wazuh/wazuh-indexer:4.14.49c344d2b1757
jackson-core@2.18.2
2.18.11
1
wazuh/wazuh-indexer:4.11.1a7a2076b167e
jackson-core@2.17.2
2.18.11
1
wazuh/wazuh-indexer:4.14.3b149b30da686
jackson-core@2.18.2
2.18.11
1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
jackson-core@2.19.2
2.21.7
1
ghcr.io/axelixlabs/axelix:1.1.0449dc880bbfb
jackson-core@2.21.5
2.21.7
1
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
jackson-core@2.21.4
2.21.7
1
ghcr.io/bysamio/casepack-api:0.32.067aa72b00d0a
jackson-core@2.21.4
2.21.7
1
ghcr.io/bysamio/keycloak:26.7.48360a1f317b8
jackson-core@2.21.5
2.21.7
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
jackson-core@3.1.5
3.1.7
1
ghcr.io/comet-ml/opik/opik-backend:2.2.875158558db5dc
jackson-core@2.21.4
2.21.7
1
ghcr.io/cosmo-tech/cosmotech-api:5.3.0b9d7cb4aa93d
jackson-core@2.22.1
2.22.3
1
ghcr.io/damap-org/damap-backend:5.0.10d5166b01eec
jackson-core@2.17.1
2.18.11
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jackson-core@2.19.0
2.21.7
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.