StackRadar

CVE-2026-89407

High

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
464
of 17,985 indexed, latest versions
Container images
493
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()

Carried by container images the latest versions of 464 of 17,985 indexed charts deploy, on 493 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.17.0, 2.17.1, 2.17.2, 2.17.3+37 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more493
OSV records
GHSA-p6pp-m3f8-5c89

Charts affected

464 by stars
ChartLatestAffected imagesRadar Score
nexus3stevehipwell-helm-charts-nexus3Verified publisher5.26.21 of 2See more

nexus3 stevehipwell-helm-charts-nexus3 5.26.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
sonatype/nexus3:3.96.4-ubi78e56e6a05d0
jackson-core@3.2.1
3.2.2

Open the chart page →

85
reposilitevolker-raschekVerified publisher1.0.11 of 1See more

reposilite volker-raschek 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-core@2.22.2
2.22.3

Open the chart page →

1,235
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
jackson-core@2.21.0
2.21.7
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
jackson-core@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
jackson-core@2.21.0
2.21.7

Open the chart page →

13,634
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
jackson-core@2.18.2
2.18.11

Open the chart page →

1,260
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-core@2.18.4.1
2.18.11

Open the chart page →

5,829
convertigoconvertigoOfficialVerified publisher8.4.52 of 5See more

convertigo convertigo 8.4.5

2 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/convertigo:8.4.50594b19f2596
jackson-core@2.22.1
2.22.3
library/couchdb:3.58cf5f8442585
jackson-core@2.21.0
2.21.7

Open the chart page →

16,348
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
jackson-core@2.19.2
2.21.7

Open the chart page →

31,714
cosmotech-apicosmotech-apiVerified publisher5.3.01 of 1See more

cosmotech-api cosmotech-api 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.0b9d7cb4aa93d
jackson-core@2.22.1
2.22.3

Open the chart page →

172
ejbca-ceejbcaOfficialVerified publisher9.6.31 of 1See more

ejbca-ce ejbca 9.6.3

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
jackson-core@2.20.1
2.21.7

Open the chart page →

1,095
flexfactorhouseOfficialVerified publisher1.0.821 of 1See more

flex factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex:96.53130791de3e7
jackson-core@2.22.2
2.22.3

Open the chart page →

51
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
jackson-core@2.17.2
2.18.11

Open the chart page →

2,985
flyte-binaryflyte2.0.501 of 4See more

flyte-binary flyte 2.0.50

1 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-core@2.21.2
2.21.7

Open the chart page →

4,627
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
jackson-core@2.18.3
2.18.11

Open the chart page →

1,548
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-core@2.21.2
2.21.7
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-core@2.21.2
2.21.7

Open the chart page →

5,303
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
hazelcasthazelcastVerified publisher5.10.32 of 2See more

hazelcast hazelcast 5.10.3

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-core@2.17.2
2.18.11
hazelcast/management-center:5.5.29241de019fc7
jackson-core@2.17.2
2.18.11

Open the chart page →

2,962
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.21.11 of 5See more

infrahub-enterprise infrahub-enterprise 4.21.1

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-core@2.21.3
2.21.7

Open the chart page →

12,095
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
metabase/metabase:latest0ad51a232989
jackson-core@2.21.6
2.21.7

Open the chart page →

101
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
jackson-core@2.18.1
2.18.11
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-core@2.18.3
2.18.11

Open the chart page →

6,914
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jackson-core@2.18.6
2.18.11

Open the chart page →

6,677
feedbacksystemthm-mni-iiVerified publisher0.48.11 of 14See more

feedbacksystem thm-mni-ii 0.48.1

1 of the 14 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.699b9f84726fa
jackson-core@2.21.2
2.21.7

Open the chart page →

25,093
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-core@2.20.0
2.21.7

Open the chart page →

4,945
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-core@2.21.1
2.21.7

Open the chart page →

670
keycloak-operatoradfinisVerified publisher1.13.11 of 1See more

keycloak-operator adfinis 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:26.7.406a13deb3919
jackson-core@2.21.5
2.21.7

Open the chart page →

122
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-core@2.21.0
2.21.7
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-core@2.21.0
2.21.7

Open the chart page →

4,529
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jackson-core@2.17.0
2.18.11

Open the chart page →

8,418
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
jackson-core@2.19.2
2.21.7

Open the chart page →

628
arcadedbarcadedb26.9.11 of 1See more

arcadedb arcadedb 26.9.1

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
arcadedata/arcadedb:26.9.102a1a74fcef3
jackson-core@2.22.2
2.22.3

Open the chart page →

108
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7

Open the chart page →

2,298
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
jackson-core@2.19.2
2.21.7

Open the chart page →

4,157
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
jackson-core@2.19.4
2.21.7

Open the chart page →

17,157
kafkacloudpirates-kafkaVerified publisher0.2.01 of 1See more

kafka cloudpirates-kafka 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
jackson-core@2.19.0
2.21.7

Open the chart page →

2,195
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
jackson-core@2.17.0
2.18.11

Open the chart page →

5,917
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
jackson-core@2.17.2
2.18.11

Open the chart page →

57,170
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
epam/ai-dial-core:latestab297af3bb3e
jackson-core@2.21.5
2.21.7

Open the chart page →

1,831
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-core@2.20.1
2.21.7

Open the chart page →

4,872
egagenteginnovationsVerified publisher0.10.01 of 1See more

egagent eginnovations 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
eginnovations/agent:7.5.4e4dfe242fe9f
jackson-core@2.22.0
2.22.3

Open the chart page →

1,507
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-admin-service:latestdb495e42fe02
jackson-core@2.21.2
2.21.7
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
jackson-core@3.1.2
3.1.7
ghcr.io/gla-rad/enav-aton-service-client:latest27a31b38e8df
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-ckeeper:latest8ac8bc2eda0c
jackson-core@3.1.5
3.1.7
ghcr.io/gla-rad/enav-eureka:latest05002092c621
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
jackson-core@3.1.0
3.1.7
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
jackson-core@2.21.2
2.21.7

Open the chart page →

14,168
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable235e0bc53da2
jackson-core@3.1.4
3.1.7

Open the chart page →

1,517
scoolderudikaVerified publisher0.3.01 of 1See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
erudikaltd/scoold:1.66.0949c56b57e8f
jackson-core@3.0.4
3.1.7

Open the chart page →

1,774
besuethereum-helm-chartsVerified publisher1.1.41 of 2See more

besu ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hyperledger/besu:latest6f3f21ce5333
jackson-core@2.21.5
2.21.7

Open the chart page →

958
flex-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

flex-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/flex-ce:96.5aca809915ca2
jackson-core@2.22.2
2.22.3

Open the chart page →

51
kpow-cefactorhouseOfficialVerified publisher1.0.821 of 1See more

kpow-ce factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
factorhouse/kpow-ce:96.5b1d5f1eea44c
jackson-core@3.2.0
3.2.2

Open the chart page →

103
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
jackson-core@2.17.2
2.18.11
featurehub/edge:1.9.198ad426737f6
jackson-core@2.17.2
2.18.11
featurehub/mr:1.9.1477d8bf771a9
jackson-core@2.17.2
2.18.11

Open the chart page →

9,384
gluugluu-flexOfficialVerified publisher0.0.0-nightly7 of 9See more

gluu gluu-flex 0.0.0-nightly

7 of the 9 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-core@2.22.1
2.22.3
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-core@2.22.1
2.22.3

Open the chart page →

2,840
amgraviteeioVerified publisher4.12.72 of 3See more

am graviteeio 4.12.7

2 of the 3 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.77b1cd283ad65
jackson-core@2.22.2
2.22.3
graviteeio/am-management-api:4.12.72a34f5148687
jackson-core@2.22.2
2.22.3

Open the chart page →

2,157
hazelcast-enterprisehazelcastVerified publisher5.15.22 of 2See more

hazelcast-enterprise hazelcast 5.15.2

2 of the 2 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
hazelcast/hazelcast-enterprise:5.7.1a69287322081
jackson-core@2.22.0
2.22.3
hazelcast/management-center:5.11.185514eca4b1c
jackson-core@3.1.5
3.1.7

Open the chart page →

344
guacamolehelmforgeVerified publisher1.5.31 of 5See more

guacamole helmforge 1.5.3

1 of the 5 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7

Open the chart page →

9,331
kafkahelmforgeVerified publisher1.4.01 of 1See more

kafka helmforge 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-89407.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7

Open the chart page →

712

Container images carrying it

493 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
jackson-core@2.20.1
2.21.7
20
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
jackson-core@2.21.2
2.21.7
7
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7
4
quay.io/keycloak/keycloak:26.7.482a77884f3af
jackson-core@2.21.5
2.21.7
4
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-core@2.17.2
2.18.11
3
jacobalberty/unifi:v10.0.162896c0ab82d33
jackson-core@2.17.3
2.18.11
3
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-core@2.21.2
2.21.7
3
ghcr.io/quenchworks/images/keycloak6d08670cfdb6
jackson-core@2.21.5
2.21.7
3
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.74.6_local:latest8b9208c09d76
jackson-core@2.18.9
2.18.11
3
quay.io/keycloak/keycloak-operator:26.7.406a13deb3919
jackson-core@2.21.5
2.21.7
3
airbyte/workload-launcher:2.3.00e18b1abcda6
jackson-core@2.21.5
2.21.7
2
apache/druid:37.0.00116fb802786
jackson-core@2.19.2
2.21.7
2
apache/fineract:1.12.1a83cf1980609
jackson-core@2.18.3
2.18.11
2
apache/kafka:4.3.177e3df905404
jackson-core@2.21.2
2.21.7
2
apache/nifi-registry:1.26.07cdfd8deec92
jackson-core@2.17.0
2.18.11
2
apache/rocketmq:5.4.0319cd8a81ed1
jackson-core@2.18.1
2.18.11
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-core@2.18.3
2.18.11
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
jackson-core@2.17.0
2.18.11
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jackson-core@2.17.2
2.18.11
2
datagrok/grok_connect:latestf5876d3aebb8
jackson-core@2.21.5
2.21.7
2
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-core@2.22.2
2.22.3
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
jackson-core@2.21.1
2.21.7
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
jackson-core@2.19.2
2.21.7
2
gisaia/arlas-server:28.0.04e693e7b6f37
jackson-core@2.21.1
2.21.7
2
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-core@2.21.2
2.21.7
2
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-core@2.21.2
2.21.7
2
hazelcast/management-center:5.5.29241de019fc7
jackson-core@2.17.2
2.18.11
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
jackson-core@2.18.0
2.18.11
2
library/elasticsearch:8.19.22d071f96fab6c
jackson-core@2.21.6
2.21.7
2
library/neo4j:5.20.052d3dec8d455
jackson-core@2.17.0
2.18.11
2
metabase/metabase:v0.61.1.x9491ed11c901
jackson-core@2.21.2
2.21.7
2
nacos/nacos-server:latest1c191c30c8cd
jackson-core@2.21.2
2.21.7
2
opensearchproject/opensearch:2.18.07f6fa1efee8f
jackson-core@2.17.2
2.18.11
2
sonatype/nexus3:3.96.4-ubi78e56e6a05d0
jackson-core@3.2.1
3.2.2
2
sonatype/nexus-iq-server:1.207.1a70014ed10b1
jackson-core@3.1.4
3.1.7
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
jackson-core@2.19.1
2.21.7
2
ghcr.io/it-at-m/refarch/refarch-gateway:1.10.0d74e6a31e2fe
jackson-core@2.17.2
2.18.11
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-core@2.22.1
2.22.3
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-core@2.22.1
2.22.3
2
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
jackson-core@2.21.2
2.21.7
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.13a0178e08639a
jackson-core@2.22.0
2.22.3
2
ghcr.io/quenchworks/images/akhq0cad184c33c4
jackson-core@3.1.5
3.1.7
2
ghcr.io/quenchworks/images/cassandraabd5ee808c8c
jackson-core@2.21.5
2.21.7
2
ghcr.io/quenchworks/images/kafka9e25982c27b9
jackson-core@2.21.5
2.21.7
2
ghcr.io/quenchworks/images/nessie5aa4f4387418
jackson-core@2.22.2
2.22.3
2

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.