StackRadar

CVE-2026-91777

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,082
of 17,966 indexed, latest versions
Container images
1,079
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind quadratic forward-reference completion

Carried by container images the latest versions of 1,082 of 17,966 indexed charts deploy, on 1,079 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.5.0, 2.5.3, 2.5.4, 2.6.0+121 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more1,079
OSV records
GHSA-cxp5-3px4-pw24
Trending
Rank 39 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

1,082 by stars
ChartLatestAffected imagesRadar Score
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
jackson-databind@2.19.2
2.21.7

Open the chart page →

31,649
cosmotech-apicosmotech-apiVerified publisher5.3.01 of 1See more

cosmotech-api cosmotech-api 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.0b9d7cb4aa93d
jackson-databind@2.22.1
2.22.3

Open the chart page →

162
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
jackson-databind@2.9.10.4
2.18.11

Open the chart page →

7,996
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jackson-databind@2.6.5
2.18.11
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jackson-databind@2.6.5
2.18.11

Open the chart page →

20,812
ejbca-ceejbcaOfficialVerified publisher9.6.31 of 1See more

ejbca-ce ejbca 9.6.3

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
jackson-databind@2.21.3
2.21.7

Open the chart page →

1,069
flexfactorhouseOfficialVerified publisher1.0.821 of 1See more

flex factorhouse 1.0.82

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
factorhouse/flex:96.53130791de3e7
jackson-databind@2.22.2
2.22.3

Open the chart page →

25
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
jackson-databind@2.17.2
2.18.11

Open the chart page →

2,958
flyte-binaryflyte2.0.501 of 4See more

flyte-binary flyte 2.0.50

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-databind@2.12.7.1
2.18.11

Open the chart page →

4,566
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
jackson-databind@2.13.1
2.18.11

Open the chart page →

10,612
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
jackson-databind@2.13.3
2.18.11

Open the chart page →

12,422
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
jackson-databind@2.10.1
2.18.11

Open the chart page →

9,129
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
jackson-databind@2.10.0
2.18.11

Open the chart page →

10,814
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
jackson-databind@2.18.3
2.18.11

Open the chart page →

1,522
apimgraviteeioVerified publisher4.12.202 of 4See more

apim graviteeio 4.12.20

2 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-databind@2.18.1
2.18.11
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-databind@2.21.2
2.21.7

Open the chart page →

5,183
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-databind@2.21.2
2.21.7

Open the chart page →

2,269
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
jackson-databind@2.9.8
2.18.11

Open the chart page →

6,746
hazelcasthazelcastVerified publisher5.10.32 of 2See more

hazelcast hazelcast 5.10.3

2 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-databind@2.17.2
2.18.11
hazelcast/management-center:5.5.29241de019fc7
jackson-databind@2.17.2
2.18.11

Open the chart page →

2,908
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.7.8
2.18.11

Open the chart page →

7,405
cratedbhmdmph2.0.31 of 2See more

cratedb hmdmph 2.0.3

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/crate:4.7.0c7984a05e15b
jackson-databind@2.11.2
2.18.11

Open the chart page →

1,429
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.21.01 of 5See more

infrahub-enterprise infrahub-enterprise 4.21.0

1 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.7

Open the chart page →

11,682
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
jackson-databind@2.14.1
2.18.11

Open the chart page →

2,131
skywalkingkubesphere-testVerified publisher3.1.02 of 4See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
jackson-databind@2.9.5
2.18.11
apache/skywalking-ui:8.1.067d50e4deff4
jackson-databind@2.9.10
2.18.11

Open the chart page →

18,139
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
jackson-databind@2.13.2.2
2.18.11

Open the chart page →

8,236
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
metabase/metabase:latest0ad51a232989
jackson-databind@2.21.6
2.21.7

Open the chart page →

65
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
jackson-databind@2.14.1
2.18.11
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
jackson-databind@2.15.3
2.18.11
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
jackson-databind@2.15.3
2.18.11
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
jackson-databind@2.15.3
2.18.11

Open the chart page →

103,840
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
jackson-databind@2.15.0
2.18.11

Open the chart page →

13,454
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
jackson-databind@2.18.3
2.18.11

Open the chart page →

6,860
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jackson-databind@2.18.6
2.18.11

Open the chart page →

6,621
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jackson-databind@2.9.10.6
2.18.11

Open the chart page →

8,229
snowplow-iglu-serversnowplow-devopsOfficialVerified publisher0.19.01 of 1See more

snowplow-iglu-server snowplow-devops 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
jackson-databind@2.14.1
2.18.11

Open the chart page →

303
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jackson-databind@2.16.2
2.18.11

Open the chart page →

2,662
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.263 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
jackson-databind@2.13.5
2.18.11
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
jackson-databind@2.15.2
2.18.11
thingsboard/tb-node:3.6.0f40a542832c4
jackson-databind@2.13.4.2
2.18.11

Open the chart page →

15,213
feedbacksystemthm-mni-iiVerified publisher0.48.03 of 14See more

feedbacksystem thm-mni-ii 0.48.0

3 of the 14 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.1b585ab8bb7e8
jackson-databind@2.14.2
2.18.11
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.1baf79539e5df
jackson-databind@2.21.2
2.21.7
ghcr.io/thm-mni-ii/fbs-runner:v2.0.15d7506dce446
jackson-databind@2.14.2
2.18.11

Open the chart page →

26,149
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-databind@2.20.0
2.21.7

Open the chart page →

4,925
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
jackson-databind@2.13.5
2.18.11

Open the chart page →

8,913
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-databind@2.21.1
2.21.7

Open the chart page →

644
keycloak-operatoradfinisVerified publisher1.13.01 of 1See more

keycloak-operator adfinis 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:26.7.268b1e5805b99
jackson-databind@2.21.5
2.21.7

Open the chart page →

132
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
jackson-databind@2.15.2
2.18.11

Open the chart page →

23,678
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-databind@2.21.0
2.21.7
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-databind@2.21.0
2.21.7

Open the chart page →

4,474
clearml-servingallegroaiVerified publisher1.6.22 of 9See more

clearml-serving allegroai 1.6.2

2 of the 9 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
jackson-databind@2.13.4.2
2.18.11
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
jackson-databind@2.13.4.2
2.18.11

Open the chart page →

19,270
pulsarapache-pulsar-helm-chart-repo1.0.321 of 2See more

pulsar apache-pulsar-helm-chart-repo 1.0.32

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
jackson-databind@2.11.1
2.18.11

Open the chart page →

7,099
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
jackson-databind@2.17.2
2.18.11

Open the chart page →

8,390
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
jackson-databind@2.19.2
2.21.7

Open the chart page →

601
arcadedbarcadedb26.9.11 of 1See more

arcadedb arcadedb 26.9.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
arcadedata/arcadedb:26.9.102a1a74fcef3
jackson-databind@2.22.2
2.22.3

Open the chart page →

82
soarv113assist-iot-cybersecurity-monitoring-soar0.1.34 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

4 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
jackson-databind@2.13.2.2
2.18.11
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
jackson-databind@2.11.1
2.18.11
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
jackson-databind@2.10.4
2.18.11
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
jackson-databind@2.9.10.1
2.18.11

Open the chart page →

18,740
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
jackson-databind@2.10.4
2.18.11

Open the chart page →

11,038
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
jackson-databind@2.21.2
2.21.7

Open the chart page →

2,269
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.18.11

Open the chart page →

86,689
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.18.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.18.11

Open the chart page →

86,689
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
jackson-databind@2.19.2
2.21.7

Open the chart page →

4,130

Container images carrying it

1,079 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
saashousekeeper/event-tracking:1.0.0d8786cea5bc4
jackson-databind@2.13.2.2
2.18.11
1
salaboy/fmtok8s-monolith:v0.1.0f225568e6d03
jackson-databind@2.11.1
2.18.11
1
salehmir/jesse:1.10.101afa95f979e9
jackson-databind@2.16.1
2.18.11
1
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-databind@2.21.1
2.21.7
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
jackson-databind@2.13.0
2.18.11
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
jackson-databind@2.9.9
2.18.11
1
seataio/seata-server:latest703b5de7f1a6
jackson-databind@2.13.5
2.18.11
1
seataio/seata-server:1.5.1ee1ed55f4144
jackson-databind@2.11.4
2.18.11
1
seldonio/apife:0.2.7ba81b17f00eb
jackson-databind@2.8.11.2
2.18.11
1
seldonio/apife:0.3.1eea0d3f578ca
jackson-databind@2.9.9
2.18.11
1
seldonio/cluster-manager:0.2.729e362bb1ba2
jackson-databind@2.8.11.2
2.18.11
1
sharque/panopticum:v8.4.7b032e41f6af5
jackson-databind@2.21.5
2.21.7
1
siakhooi/query:1.0.0f1f4b5b1b870
jackson-databind@3.1.0
3.1.7
1
signald/signald:0.18.20ffad7ccc2eb
jackson-databind@2.13.0
2.18.11
1
signald/signald:0.23.2edbff058278c
jackson-databind@2.14.1
2.18.11
1
slagattollas/planner-practica:latestcecd95e31486
jackson-databind@2.11.3
2.18.11
1
slagattollas/toposervice-practica:latestdc63973dae0d
jackson-databind@2.11.3
2.18.11
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jackson-databind@2.9.10.6
2.18.11
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
jackson-databind@2.12.5
2.18.11
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jackson-databind@2.6.5
2.18.11
1
snowplow/iglu-server:0.12.0-distroless5a38033f07c1
jackson-databind@2.14.1
2.18.11
1
snowplow/scala-stream-collector-pubsub:2.2.041d318841516
jackson-databind@2.9.10.6
2.18.11
1
softwaremill/bootzooka:latest845b5e8f8056
jackson-databind@3.1.1
3.1.7
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
jackson-databind@2.16.2
2.18.11
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
jackson-databind@2.11.3
2.18.11
1
sonatype/nexus:oss6bc88b51d4d7
jackson-databind@2.11.3
2.18.11
1
sonatype/nexus3:3.53.04bd975493104
jackson-databind@2.14.1
2.18.11
1
sonatype/nexus3:3.58.1586060431b64
jackson-databind@2.14.1
2.18.11
1
sonatype/nexus3:3.96.0-ubia1f2dbdc4c94
jackson-databind@3.2.1
3.2.3
1
sonatype/nexus3:3.96.3a406f4e9dc14
jackson-databind@3.2.1
3.2.3
1
sonatype/nexus3:3.96.3-ubicead2aaf041f
jackson-databind@3.2.1
3.2.3
1
sslhep/hive-metastore:3.1.39e80af083079
jackson-databind@2.7.8
2.18.11
1
stanislovesid/oracle-host-app:14fe1ed26e194
jackson-databind@2.12.5
2.18.11
1
stardog/stardog:latest2714e5c4b3c1
jackson-databind@2.18.3
2.18.11
1
strangebee/thehive:5.8.0-1a7f7b05fba24
jackson-databind@2.22.2
2.22.3
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
jackson-databind@2.15.0
2.18.11
1
structurizr/onpremises:2025.11.094b5ffb5119c8
jackson-databind@2.20.0
2.21.7
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jackson-databind@2.15.0
2.18.11
1
sysnet4admin/colosseum-agg:logbc25b152d88e
jackson-databind@2.18.2
2.18.11
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-databind@3.1.3
3.1.7
1
thehiveproject/cortex:3.1.7f4bc64fb8844
jackson-databind@2.11.1
2.18.11
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jackson-databind@2.8.11
2.18.11
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
jackson-databind@2.13.2
2.18.11
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
jackson-databind@2.13.2
2.18.11
1
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
jackson-databind@2.21.6
2.21.7
1
thingsboard/tbmq-node:2.4.070661025dba5
jackson-databind@2.21.6
2.21.7
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
jackson-databind@2.13.2
2.18.11
1
thingsboard/tb-node:3.4.1645f43b688f7
jackson-databind@2.13.2
2.18.11
1
thingsboard/tb-node:3.6.0f40a542832c4
jackson-databind@2.13.4.2
2.18.11
1
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-databind@2.18.4
2.18.11
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.