StackRadar

CVE-2026-91777

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,047
of 17,985 indexed, latest versions
Container images
1,044
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind quadratic forward-reference completion

Carried by container images the latest versions of 1,047 of 17,985 indexed charts deploy, on 1,044 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.5.0, 2.5.3, 2.5.4, 2.6.0+120 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more1,044
OSV records
GHSA-cxp5-3px4-pw24
Trending
Rank 39 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

1,047 by stars
ChartLatestAffected imagesRadar Score
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
jackson-databind@2.13.1
2.18.11

Open the chart page →

11,801
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jackson-databind@2.9.5
2.18.11

Open the chart page →

15,941
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
jackson-databind@2.9.6
2.18.11

Open the chart page →

116,845
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.18.11

Open the chart page →

11,248
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
jackson-databind@2.11.2
2.18.11

Open the chart page →

11,248
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
jackson-databind@2.14.3
2.18.11

Open the chart page →

3,197
verapdfmlohrVerified publisher1.4.01 of 1See more

verapdf mlohr 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
verapdf/rest:v1.30.2341359ac6af5
jackson-databind@2.19.2
2.21.7

Open the chart page →

578
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.11

Open the chart page →

12,383
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.11

Open the chart page →

12,383
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.11

Open the chart page →

12,805
backendmojaloop0.1.02 of 6See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
jackson-databind@2.10.5.1
2.18.11
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
jackson-databind@2.15.2
2.18.11

Open the chart page →

16,787
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.11

Open the chart page →

12,126
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
jackson-databind@2.13.3
2.18.11

Open the chart page →

20,144
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jackson-databind@2.17.0
2.18.11

Open the chart page →

32,461
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
jackson-databind@2.12.3
2.18.11

Open the chart page →

103,204
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
jackson-databind@2.12.6
2.18.11

Open the chart page →

16,500
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2708162b8c094
jackson-databind@2.14.2
2.18.11

Open the chart page →

5,879
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
athou/commafeed:6.2.0-postgresql5e388351df1a
jackson-databind@2.20.1
2.21.7

Open the chart page →

3,903
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
jackson-databind@2.19.2
2.21.7

Open the chart page →

2,923
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
jackson-databind@2.13.4
2.18.11

Open the chart page →

9,025
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.11

Open the chart page →

20,785
myappmyapp-helm-charts0.4.01 of 1See more

myapp myapp-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
adityaprasadpathak/myapp:3.07e3b9777362c
jackson-databind@2.17.1
2.18.11

Open the chart page →

2,237
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jackson-databind@2.10.4
2.18.11

Open the chart page →

9,685
Practica_4_helmmy-heml-appVerified publisher0.1.03 of 7See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
jackson-databind@2.13.0
2.18.11
codeurjc/server:v1.0310bea5b1ee7
jackson-databind@2.13.4.2
2.18.11
codeurjc/toposervice:v1.09fb4c11e6a49
jackson-databind@2.14.1
2.18.11

Open the chart page →

29,067
nacosnacos-yunyeVerified publisher1.0.31 of 1See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.130a39cb0c54d
jackson-databind@2.18.3
2.18.11

Open the chart page →

2,159
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latest9008fc010a21
jackson-databind@2.22.0
2.22.3

Open the chart page →

1,845
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.11

Open the chart page →

20,785
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.11

Open the chart page →

20,785
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-databind@2.11.0
2.18.11

Open the chart page →

20,785
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
jackson-databind@2.16.1
2.18.11

Open the chart page →

16,212
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jackson-databind@2.5.0
2.18.11

Open the chart page →

55,472
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-databind@2.10.5.1
2.18.11

Open the chart page →

2,724
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
jackson-databind@2.9.9.1
2.18.11

Open the chart page →

3,616
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
jackson-databind@2.20.0
2.21.7

Open the chart page →

5,598
davosnicholaswildeVerified publisher1.0.01 of 1See more

davos nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/davos:2.2.1-ls7624ba55aeaa4f
jackson-databind@2.8.4
2.18.11

Open the chart page →

6,623
config-server-helm-chartnotesprojectchart0.1.01 of 1See more

config-server-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vlebediantsev/config-server-another:lateste7f20450d2ae
jackson-databind@2.13.3
2.18.11

Open the chart page →

3,483
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
jackson-databind@2.13.3
2.18.11

Open the chart page →

5,790
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jackson-databind@2.10.5.1
2.18.11

Open the chart page →

4,670
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
jackson-databind@2.13.3
2.18.11

Open the chart page →

6,805
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
jackson-databind@2.13.3
2.18.11

Open the chart page →

5,812
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
jackson-databind@2.13.3
2.18.11

Open the chart page →

5,769
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
jackson-databind@2.10.3
2.18.11

Open the chart page →

3,699
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
jackson-databind@2.11.3
2.18.11

Open the chart page →

3,344
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
jackson-databind@2.15.2
2.18.11

Open the chart page →

2,363
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
jackson-databind@2.17.0
2.18.11

Open the chart page →

6,077
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
jackson-databind@2.13.0
2.18.11

Open the chart page →

8,654
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
jackson-databind@2.14.2
2.18.11

Open the chart page →

9,942
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
jackson-databind@2.15.2
2.18.11
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
jackson-databind@2.15.2
2.18.11
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
jackson-databind@2.15.2
2.18.11

Open the chart page →

19,298
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
jackson-databind@2.14.0-rc1
2.18.11

Open the chart page →

6,568
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
jackson-databind@2.18.3
2.18.11

Open the chart page →

7,423

Container images carrying it

1,044 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
j4ckhunter/consumer:1.00bb7a429e3e75
jackson-databind@2.13.3
2.18.11
1
j4ckhunter/producer:1.006ba447609b12
jackson-databind@2.13.3
2.18.11
1
jacobalberty/unifi:v7.1.664a3616625dda
jackson-databind@2.13.1
2.18.11
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
jackson-databind@2.13.3
2.18.11
1
jacobalberty/unifi:5.10.19c409924e2463
jackson-databind@2.9.7
2.18.11
1
javaaurelio/dadosfake_web_springboot:latest8541a3cd021a
jackson-databind@2.15.3
2.18.11
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
jackson-databind@2.17.0
2.18.11
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
jackson-databind@2.17.0
2.18.11
1
jhidalgo3/spring-echo-example:lateste08733191ea0
jackson-databind@2.11.4
2.18.11
1
jhipster/jhipster-registry:latest7184525acd4d
jackson-databind@2.13.3
2.18.11
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
jackson-databind@2.10.5
2.18.11
1
jkaninda/simple-api:latestce4122d4c789
jackson-databind@2.15.4
2.18.11
1
just1not2/streama:1.10.48a2305192dec
jackson-databind@2.8.6
2.18.11
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jackson-databind@2.16.2
2.18.11
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
jackson-databind@2.16.0
2.18.11
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
jackson-databind@2.16.0
2.18.11
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
jackson-databind@2.16.0
2.18.11
1
kdhrubo/db2rest:lateste20610ff81b0
jackson-databind@2.19.2
2.21.7
1
keyauthoritydh/keycloak:26.7.1-r1903c69d4ee97
jackson-databind@2.21.2
2.21.7
1
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
jackson-databind@2.21.3
2.21.7
1
keyfactor/signserver-ce:7.7.1f8d64caeaea9
jackson-databind@2.20.1
2.21.7
1
kimb88/hello-world-spring-boot:latest0639155241cb
jackson-databind@2.9.6
2.18.11
1
krontechnology/aapm-agent:1.8.508e04ea66dfd
jackson-databind@2.18.9
2.18.11
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
jackson-databind@2.11.3
2.18.11
1
kubebb/gateway-api:v5.6.04d062f20309c
jackson-databind@2.13.4
2.18.11
1
kubebb/mesh-api:v5.7.0a3879931dfa1
jackson-databind@2.13.3
2.18.11
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
jackson-databind@2.17.1
2.18.11
1
kyso/imagebox:latest68091eace89c
jackson-databind@2.9.8
2.18.11
1
labs64/auditflow400b18c5aa54
jackson-databind@3.1.5
3.1.7
1
labs64/payment-gateway:0.0.10c66feefca17
jackson-databind@2.21.4
2.21.7
1
ladeit/ladeit:latest962b665ffe82
jackson-databind@2.9.7
2.18.11
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jackson-databind@2.11.2
2.18.11
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jackson-databind@2.11.2
2.18.11
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jackson-databind@2.11.4
2.18.11
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
jackson-databind@2.13.1
2.18.11
1
lavandadelpatio/tmdb:latestded9377636e9
jackson-databind@2.15.3
2.18.11
1
lavandadelpatio/tmdb:0.0.2f36af885e915
jackson-databind@2.11.4
2.18.11
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
jackson-databind@2.14.2
2.18.11
1
library/cassandra:4.03a4876cc7f18
jackson-databind@2.19.2
2.21.7
1
library/cassandra:3.11.10b095ff3248c6
jackson-databind@2.9.10.4
2.18.11
1
library/convertigo:8.4.50594b19f2596
jackson-databind@2.22.1
2.22.3
1
library/couchdb:3.58cf5f8442585
jackson-databind@2.21.0
2.21.7
1
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.18.11
1
library/elasticsearch:8.17.32cc40b15dff8
jackson-databind@2.15.0
2.18.11
1
library/elasticsearch:8.15.0310b9fc03b06
jackson-databind@2.15.0
2.18.11
1
library/elasticsearch:7.17.0332c6d416808
jackson-databind@2.10.4
2.18.11
1
library/elasticsearch:7.17.1588c2ec10c7f2
jackson-databind@2.14.2
2.18.11
1
library/elasticsearch:7.16.18d5fd89230d7
jackson-databind@2.10.4
2.18.11
1
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.18.8
2.18.11
1
library/elasticsearch:7.9.1a208e0ba7646
jackson-databind@2.10.4
2.18.11
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.