StackRadar

CVE-2026-89425

High

Advisory

Published 1 Oct 2026In the index since 2 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,076
of 17,985 indexed, latest versions
Container images
1,074
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)

Carried by container images the latest versions of 1,076 of 17,985 indexed charts deploy, on 1,074 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.8.1, 2.8.4, 2.8.6, 2.8.7+91 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more1,074
OSV records
GHSA-7hhh-6rmp-j9qf
Trending
Rank 30 in indexed charts, since 2 Oct 2026. See the ranking →

Charts affected

1,076 by stars
ChartLatestAffected imagesRadar Score
jenkinsjenkinsciOfficialVerified publisher5.9.641 of 2See more

jenkins jenkinsci 5.9.64

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
jackson-core@2.20.1
2.21.7

Open the chart page →

2,984
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
jackson-core@2.14.1
2.18.11

Open the chart page →

7,057
metabasepmint932.27.71 of 1See more

metabase pmint93 2.27.7

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
jackson-core@2.21.2
2.21.7

Open the chart page →

1,818
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jackson-core@2.11.4
2.18.11

Open the chart page →

7,935
kafka-uikafka-uiVerified publisher1.6.51 of 1See more

kafka-ui kafka-ui 1.6.5

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
jackson-core@2.21.2
2.21.7

Open the chart page →

879
keycloakxcodecentricVerified publisher7.3.21 of 1See more

keycloakx codecentric 7.3.2

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.482a77884f3af
jackson-core@2.21.5
2.21.7

Open the chart page →

192
jiraatlassian-data-centerVerified publisher2.0.151 of 2See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
atlassian/jira-software:11.3.114046f4a668a4
jackson-core@2.21.6
2.21.7

Open the chart page →

1,655
strimzi-kafka-operatorstrimzi-kafka-operator1.2.01 of 1See more

strimzi-kafka-operator strimzi-kafka-operator 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:1.2.077f8fa8121a6
jackson-core@3.1.5
3.1.7

Open the chart page →

247
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
jackson-core@3.1.0
3.1.7

Open the chart page →

1,506
keycloakcloudpirates-keycloakVerified publisher0.21.411 of 3See more

keycloak cloudpirates-keycloak 0.21.41

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.482a77884f3af
jackson-core@2.21.5
2.21.7

Open the chart page →

4,666
graylogkong-zVerified publisher3.0.352 of 5See more

graylog kong-z 3.0.35

2 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
graylog/graylog:7.2.0-rc.1-1e5f1335a759c
jackson-core@2.22.2
2.22.3
opensearchproject/opensearch:2.19.6e321cb03c643
jackson-core@2.18.8
2.18.11

Open the chart page →

2,750
nexus3stevehipwellVerified publisher5.26.21 of 2See more

nexus3 stevehipwell 5.26.2

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
sonatype/nexus3:3.96.4-ubi78e56e6a05d0
jackson-core@3.2.1
3.2.3

Open the chart page →

85
strimzi-kafka-operatorstrimzi1.2.01 of 1See more

strimzi-kafka-operator strimzi 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:1.2.077f8fa8121a6
jackson-core@3.1.5
3.1.7

Open the chart page →

247
datahubdatahubVerified publisher1.1.62 of 4See more

datahub datahub 1.1.6

2 of the 4 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
jackson-core@2.21.5
2.21.7
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
jackson-core@3.1.2
3.1.7

Open the chart page →

1,374
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
jackson-core@2.12.3
2.18.11

Open the chart page →

174,996
penpotpenpotOfficialVerified publisher1.11.11 of 5See more

penpot penpot 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
penpotapp/backend:2.18.13b7df71db88d
jackson-core@2.22.2
2.22.3

Open the chart page →

5,958
signozsignoz0.144.01 of 5See more

signoz signoz 0.144.0

1 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
signoz/zookeeper:3.7.1fcc4a3288154
jackson-core@2.13.2
2.18.11

Open the chart page →

7,981
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.20e951a1d07bb
jackson-core@2.18.3
2.18.11

Open the chart page →

5,185
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-core@2.21.4
2.21.7

Open the chart page →

1,961
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7

Open the chart page →

4,127
gocdgocdOfficialVerified publisher2.18.11 of 2See more

gocd gocd 2.18.1

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
gocd/gocd-server:v26.1.0720d1012b93f
jackson-core@2.22.0
2.22.3

Open the chart page →

1,705
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.3b149b30da686
jackson-core@2.18.2
2.18.11

Open the chart page →

12,415
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
jackson-core@2.13.4
2.18.11

Open the chart page →

2,591
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
jackson-core@2.15.2
2.18.11

Open the chart page →

12,707
milvusmilvus-helm5.0.301 of 4See more

milvus milvus-helm 5.0.30

1 of the 4 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
jackson-core@2.14.2
2.18.11

Open the chart page →

12,028
rocketmqrocketmq12.6.02 of 2See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
jackson-core@2.18.1
2.18.11
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-core@2.18.3
2.18.11

Open the chart page →

6,914
cerebrowiremindVerified publisher2.4.01 of 1See more

cerebro wiremind 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
lmenezes/cerebro:0.9.47d9e2b77e459
jackson-core@2.10.5
2.18.11

Open the chart page →

1,009
apicurio-registryapicurio-registry-helmVerified publisher3.8.02 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

2 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
jackson-core@2.12.5
2.18.11
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
jackson-core@2.15.2
2.18.11

Open the chart page →

7,015
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
jackson-core@2.21.5
2.21.7

Open the chart page →

37,063
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
jackson-core@2.10.3
2.18.11

Open the chart page →

3,420
zookeepercloudpirates-zookeeperVerified publisher0.15.01 of 1See more

zookeeper cloudpirates-zookeeper 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
library/zookeeper:3.9.57d0f24ebb67b
jackson-core@2.15.2
2.18.11

Open the chart page →

3,294
apim3graviteeioVerified publisher4.12.202 of 4See more

apim3 graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-core@2.21.2
2.21.7
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-core@2.21.2
2.21.7

Open the chart page →

5,303
polarisapache-polarisOfficialVerified publisher1.3.0-incubating1 of 1See more

polaris apache-polaris 1.3.0-incubating

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apache/polaris:lateste66366e783f1
jackson-core@2.22.0
2.22.3

Open the chart page →

722
cloudbeaveravistoVerified publisher1.1.71 of 1See more

cloudbeaver avisto 1.1.7

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:26.1.287ab86d00f8c
jackson-core@2.15.2
2.18.11

Open the chart page →

2,082
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
jackson-core@2.19.2
2.21.7

Open the chart page →

4,239
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
jackson-core@2.15.2
2.18.11

Open the chart page →

32,993
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
jackson-core@2.13.2
2.18.11

Open the chart page →

8,336
cassandrakubelauncherVerified publisher0.1.291 of 1See more

cassandra kubelauncher 0.1.29

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/cassandradigest-pinned4a2625365fc6
jackson-core@2.19.2
2.21.7

Open the chart page →

1,344
kafkakubelauncherVerified publisher0.1.281 of 1See more

kafka kubelauncher 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned0b761e55e9ef
jackson-core@2.16.2
2.18.11

Open the chart page →

1,282
zookeeperkubelauncherVerified publisher0.2.121 of 1See more

zookeeper kubelauncher 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/zookeeperdigest-pinned9a85b8701c5e
jackson-core@2.15.2
2.18.11

Open the chart page →

1,085
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
itzg/bungeecord:latestde76286c0e73
jackson-core@3.1.3
3.1.7

Open the chart page →

3,195
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-core@2.12.1
2.18.11

Open the chart page →

2,737
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
jackson-core@2.10.4
2.18.11

Open the chart page →

4,208
camunda-bpm-platformcamunda-community-hub7.6.111 of 1See more

camunda-bpm-platform camunda-community-hub 7.6.11

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
camunda/camunda-bpm-platform:latestbcc5bb0542df
jackson-core@2.15.2
2.18.11

Open the chart page →

1,286
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
jackson-core@2.13.2
2.18.11
penpotapp/exporter:1.16.0-betafa7086ad92b1
jackson-core@2.9.9
2.18.11

Open the chart page →

29,783
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
jackson-core@2.13.4
2.18.11

Open the chart page →

2,654
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
jackson-core@2.19.0
2.21.7

Open the chart page →

4,127
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
jackson-core@2.13.2
2.18.11

Open the chart page →

5,863
grayloggroundhog2k0.13.101 of 1See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
graylog/graylog:7.1.9598bd41fefd5
jackson-core@2.21.2
2.21.7

Open the chart page →

1,420
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-89425.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jackson-core@2.16.2
2.18.11

Open the chart page →

3,783

Container images carrying it

1,074 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
salehmir/jesse:1.10.101afa95f979e9
jackson-core@2.16.1
2.18.11
1
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-core@2.21.1
2.21.7
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
jackson-core@2.13.0
2.18.11
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
jackson-core@2.9.9
2.18.11
1
seataio/seata-server:latest703b5de7f1a6
jackson-core@2.13.5
2.18.11
1
seataio/seata-server:1.5.1ee1ed55f4144
jackson-core@2.11.4
2.18.11
1
seldonio/apife:0.2.7ba81b17f00eb
jackson-core@2.8.11
2.18.11
1
seldonio/apife:0.3.1eea0d3f578ca
jackson-core@2.9.9
2.18.11
1
seldonio/cluster-manager:0.2.729e362bb1ba2
jackson-core@2.8.11
2.18.11
1
sharque/panopticum:v8.4.7b032e41f6af5
jackson-core@2.21.5
2.21.7
1
siakhooi/query:1.0.0f1f4b5b1b870
jackson-core@2.21.2
2.21.7
1
signald/signald:0.18.20ffad7ccc2eb
jackson-core@2.13.0
2.18.11
1
signald/signald:0.23.2edbff058278c
jackson-core@2.14.1
2.18.11
1
slagattollas/planner-practica:latestcecd95e31486
jackson-core@2.11.3
2.18.11
1
slagattollas/toposervice-practica:latestdc63973dae0d
jackson-core@2.11.3
2.18.11
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jackson-core@2.9.10
2.18.11
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
jackson-core@2.12.5
2.18.11
1
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
jackson-core@2.14.1
2.18.11
1
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
jackson-core@2.11.1
2.18.11
1
softwaremill/bootzooka:latest845b5e8f8056
jackson-core@3.1.1
3.1.7
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jackson-core@2.16.2
2.18.11
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
jackson-core@2.11.3
2.18.11
1
sonatype/nexus:oss6bc88b51d4d7
jackson-core@2.11.3
2.18.11
1
sonatype/nexus3:3.53.04bd975493104
jackson-core@2.14.1
2.18.11
1
sonatype/nexus3:3.58.1586060431b64
jackson-core@2.11.2
2.18.11
1
sonatype/nexus3:3.96.3a406f4e9dc14
jackson-core@3.2.1
3.2.3
1
sslhep/hive-metastore:3.1.39e80af083079
jackson-core@2.12.0
2.18.11
1
stanislovesid/oracle-host-app:14fe1ed26e194
jackson-core@2.12.5
2.18.11
1
stardog/stardog:latest2714e5c4b3c1
jackson-core@2.22.1
2.22.3
1
strangebee/thehive:5.8.0-1a7f7b05fba24
jackson-core@2.22.2
2.22.3
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
jackson-core@2.15.0
2.18.11
1
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-core@2.20.0
2.21.7
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jackson-core@2.15.0
2.18.11
1
sysnet4admin/colosseum-agg:logbc25b152d88e
jackson-core@2.18.2
2.18.11
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-core@2.21.4
2.21.7
1
thehiveproject/cortex:3.1.7f4bc64fb8844
jackson-core@2.11.1
2.18.11
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-core@2.8.11
2.18.11
1
themoah/klag:0.2.187178531ebe86
jackson-core@2.21.6
2.21.7
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
jackson-core@2.13.2
2.18.11
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
jackson-core@2.13.2
2.18.11
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
jackson-core@2.21.6
2.21.7
1
thingsboard/tbmq-node:2.4.070661025dba5
jackson-core@2.21.6
2.21.7
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
jackson-core@2.13.2
2.18.11
1
thingsboard/tb-node:3.4.1645f43b688f7
jackson-core@2.13.2
2.18.11
1
thingsboard/tb-node:3.6.0f40a542832c4
jackson-core@2.13.4
2.18.11
1
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-core@2.18.4.1
2.18.11
1
tinymediamanager/tinymediamanager:5.3.36f332431a2ae
jackson-core@2.21.2
2.21.7
1
tock/bot_admin:25.10.7df3e38c77a38
jackson-core@2.20.0
2.21.7
1
tock/bot_api:25.10.7dd5d5c70e333
jackson-core@2.20.0
2.21.7
1
tock/build_worker:25.10.7080cb6b08d5b
jackson-core@2.20.0
2.21.7
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.