StackRadar

CVE-2026-91777

High

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,082
of 17,966 indexed, latest versions
Container images
1,079
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind quadratic forward-reference completion

Carried by container images the latest versions of 1,082 of 17,966 indexed charts deploy, on 1,079 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.5.0, 2.5.3, 2.5.4, 2.6.0+121 more2.18.11, 2.21.7, 2.22.3, 3.1.7+1 more1,079
OSV records
GHSA-cxp5-3px4-pw24
Trending
Rank 39 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

1,082 by stars
ChartLatestAffected imagesRadar Score
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
jackson-databind@2.16.2
2.18.11

Open the chart page →

3,769
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
jackson-databind@2.8.11.2
2.18.11

Open the chart page →

10,802
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jackson-databind@2.9.5
2.18.11
dbanda/spark:2.4.6d0e6367876ae
jackson-databind@2.6.7.1
2.18.11

Open the chart page →

13,800
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
jackson-databind@2.11.0
2.18.11
platform9community/api-gateway:latest40a4970de568
jackson-databind@2.11.0
2.18.11
platform9community/customers-service:latest2089811e5cc6
jackson-databind@2.11.0
2.18.11
platform9community/vets-service:latestd1165c94dfb3
jackson-databind@2.11.0
2.18.11
platform9community/visits-service:latest8d11b50368c6
jackson-databind@2.11.0
2.18.11

Open the chart page →

43,299
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
jackson-databind@2.11.2
2.18.11

Open the chart page →

6,088
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
jackson-databind@2.14.0
2.18.11
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
jackson-databind@2.14.0
2.18.11

Open the chart page →

15,513
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.0

2 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
jackson-databind@2.21.6
2.21.7
thingsboard/tbmq-node:2.4.070661025dba5
jackson-databind@2.21.6
2.21.7

Open the chart page →

3,695
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
jackson-databind@2.17.3
2.18.11

Open the chart page →

7,929
elasticsearch-clusterwiremindVerified publisher4.5.31 of 2See more

elasticsearch-cluster wiremind 4.5.3

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22d071f96fab6c
jackson-databind@2.21.6
2.21.7

Open the chart page →

697
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.351e6d33676f6
jackson-databind@2.21.5
2.21.7

Open the chart page →

1,554
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
jackson-databind@2.12.7.1
2.18.11

Open the chart page →

12,749
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jackson-databind@2.21.2
2.21.7

Open the chart page →

1,878
keycloakhelmforgeVerified publisher3.0.141 of 1See more

keycloak helmforge 3.0.14

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.482a77884f3af
jackson-databind@2.21.5
2.21.7

Open the chart page →

165
janssenjanssen-auth-serverOfficialVerified publisher0.0.0-nightly7 of 8See more

janssen janssen-auth-server 0.0.0-nightly

7 of the 8 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly5d6d9a2a1d96
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/casa:0.0.0-nightlye55838190832
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly7b97fe25f964
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly613eae7771a8
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/configurator:0.0.0-nightly990cbab56331
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly1c63019e8ef6
jackson-databind@2.22.1
2.22.3
ghcr.io/janssenproject/jans/scim:0.0.0-nightlyea680fe73dc9
jackson-databind@2.22.1
2.22.3

Open the chart page →

1,857
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jackson-databind@2.13.2.1
2.18.11

Open the chart page →

9,015
nessienessie0.108.81 of 1See more

nessie nessie 0.108.8

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/projectnessie/nessie:0.108.8aee5e959530b
jackson-databind@3.2.2
3.2.3

Open the chart page →

147
reposilitereposilite1.4.21 of 1See more

reposilite reposilite 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-databind@2.22.2
2.22.3

Open the chart page →

1,208
nexus-iq-serversonatypeVerified publisher207.1.01 of 1See more

nexus-iq-server sonatype 207.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
sonatype/nexus-iq-server:1.207.1a70014ed10b1
jackson-databind@2.22.1
2.22.3

Open the chart page →

150
thehivestrangebee-helmOfficialVerified publisher1.1.03 of 7See more

thehive strangebee-helm 1.1.0

3 of the 7 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
jackson-databind@2.13.2.2
2.18.11
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jackson-databind@2.15.0
2.18.11
strangebee/thehive:5.8.0-1a7f7b05fba24
jackson-databind@2.22.2
2.22.3

Open the chart page →

17,667
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.11.1a7a2076b167e
jackson-databind@2.14.1
2.18.11

Open the chart page →

6,707
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
jackson-databind@2.13.4.2
2.18.11

Open the chart page →

8,280
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
jackson-databind@2.16.0
2.18.11

Open the chart page →

2,939
bambooatlassian-data-centerVerified publisher2.0.151 of 2See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.119160c3bfb73b
jackson-databind@2.21.5
2.21.7

Open the chart page →

37,280
axelixaxelixVerified publisher1.1.01 of 1See more

axelix axelix 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
ghcr.io/axelixlabs/axelix:1.1.0449dc880bbfb
jackson-databind@3.1.5
3.1.7

Open the chart page →

120
crushftpcrushftp0.0.142 of 3See more

crushftp crushftp 0.0.14

2 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
crushftp/crushftp11:latest-dev7fb4636f28c3
jackson-databind@2.21.4
2.21.7
crushftp/crushftp11:latestf91eac198848
jackson-databind@2.21.4
2.21.7

Open the chart page →

182
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
jackson-databind@2.13.4.2
2.18.11

Open the chart page →

82,487
dialdialOfficialVerified publisher8.0.01 of 4See more

dial dial 8.0.0

1 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
epam/ai-dial-core:0.48.0414b85d32145
jackson-databind@2.21.5
2.21.7

Open the chart page →

2,299
kpowfactorhouseOfficialVerified publisher1.0.841 of 1See more

kpow factorhouse 1.0.84

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
factorhouse/kpow:96.55994fa3bacce
jackson-databind@2.22.2
2.22.3

Open the chart page →

76
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
jackson-databind@2.21.0
2.21.7

Open the chart page →

61,375
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
jackson-databind@2.21.4
2.21.7

Open the chart page →

4,299
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
jackson-databind@2.18.2
2.18.11
apache/hertzbeat-collector:1.8.0a2bab1be574c
jackson-databind@2.18.2
2.18.11

Open the chart page →

15,440
infrahubinfrahubVerified publisher4.33.31 of 5See more

infrahub infrahub 4.33.3

1 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/neo4j:2026.05.06c162e2432f8
jackson-databind@2.21.3
2.21.7

Open the chart page →

11,568
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@3.1.3
3.1.7

Open the chart page →

2,846
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
jackson-databind@2.13.4.2
2.18.11

Open the chart page →

4,848
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
jackson-databind@2.14.1
2.18.11
opensearchproject/opensearch:2.10.0c8f3ebd2a934
jackson-databind@2.15.2
2.18.11

Open the chart page →

11,301
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
jackson-databind@2.15.2
2.18.11

Open the chart page →

4,665
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
jackson-databind@2.13.3
2.18.11

Open the chart page →

11,078
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
jackson-databind@2.10.1
2.18.11

Open the chart page →

3,332
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-databind@2.21.1
2.21.7

Open the chart page →

794
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jackson-databind@2.11.4
2.18.11
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jackson-databind@2.11.3
2.18.11

Open the chart page →

8,938
nexus3stevehipwell-helm-charts-nexus3Verified publisher5.26.11 of 2See more

nexus3 stevehipwell-helm-charts-nexus3 5.26.1

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
sonatype/nexus3:3.96.3-ubicead2aaf041f
jackson-databind@3.2.1
3.2.3

Open the chart page →

82
reposilitevolker-raschekVerified publisher1.0.11 of 1See more

reposilite volker-raschek 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-databind@2.22.2
2.22.3

Open the chart page →

1,208
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-databind@2.10.5.1
2.18.11

Open the chart page →

7,241
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
jackson-databind@3.1.2
3.1.7
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
jackson-databind@2.21.0
2.21.7
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
jackson-databind@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
jackson-databind@2.21.0
2.21.7
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
jackson-databind@2.21.0
2.21.7
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
jackson-databind@3.1.2
3.1.7
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
jackson-databind@2.21.0
2.21.7

Open the chart page →

13,431
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
jackson-databind@2.18.2
2.18.11

Open the chart page →

1,234
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-databind@2.18.4
2.18.11

Open the chart page →

5,799
cloudflowcloudflow-helm-charts0.0.0-NIGHTLY011220201 of 1See more

cloudflow cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
lightbend/cloudflow-operator:0.0.0-NIGHTLY011220202647f396de23
jackson-databind@2.10.4
2.18.11

Open the chart page →

1,941
cmak-operatorcmak-operatorVerified publisher2.2.22 of 3See more

cmak-operator cmak-operator 2.2.2

2 of the 3 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/zookeeper:3.6.180ad2170ad62
jackson-databind@2.10.3
2.18.11
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
jackson-databind@2.10.0
2.18.11

Open the chart page →

4,742
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
jackson-databind@2.12.7.1
2.18.11

Open the chart page →

7,855
convertigoconvertigoOfficialVerified publisher8.4.52 of 5See more

convertigo convertigo 8.4.5

2 of the 5 container images this version deploys carry CVE-2026-91777.

Container imageDigestPackageFixed in
library/convertigo:8.4.50594b19f2596
jackson-databind@2.22.1
2.22.3
library/couchdb:3.58cf5f8442585
jackson-databind@2.21.0
2.21.7

Open the chart page →

16,268

Container images carrying it

1,079 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
jackson-databind@2.17.0
2.18.11
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jackson-databind@2.15.0
2.18.11
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
jackson-databind@2.15.2
2.18.11
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
jackson-databind@2.13.4.2
2.18.11
2
confluentinc/cp-zookeeper:latest7610a50b13e7
jackson-databind@2.16.2
2.18.11
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
jackson-databind@2.13.4.2
2.18.11
2
danisla/hadoop:2.9.0255ba2dd739b
jackson-databind@2.7.8
2.18.11
2
datagrok/grok_connect:latestf5876d3aebb8
jackson-databind@2.18.9
2.18.11
2
dependencytrack/apiserver:4.6.3485ac0952c02
jackson-databind@2.13.4
2.18.11
2
dina1993/airports-api:latestac731244aed1
jackson-databind@2.14.2
2.18.11
2
dina1993/airports-consumer:latest669d146a5e63
jackson-databind@2.14.2
2.18.11
2
dina1993/airports-producer:latest3d6b0dac1cb4
jackson-databind@2.14.2
2.18.11
2
dzikoysk/reposilite:3.6.390de4c8e6c0e
jackson-databind@2.22.2
2.22.3
2
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
jackson-databind@2.8.11
2.18.11
2
frinx/sample-topology:6.1.01a19658415b6
jackson-databind@2.15.4
2.18.11
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
jackson-databind@2.11.2
2.18.11
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
jackson-databind@2.11.2
2.18.11
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
jackson-databind@2.11.2
2.18.11
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
jackson-databind@2.11.2
2.18.11
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
jackson-databind@2.11.2
2.18.11
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
jackson-databind@2.11.2
2.18.11
2
gisaia/arlas-permissions-server:28.0.0e612fc722e02
jackson-databind@2.21.0
2.21.7
2
gisaia/arlas-persistence-server:28.0.0f667e0ee79be
jackson-databind@2.21.0
2.21.7
2
gisaia/arlas-server:28.0.04e693e7b6f37
jackson-databind@2.21.0
2.21.7
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jackson-databind@2.6.5
2.18.11
2
gradiant/opentsdb:2.4.0c33d53913869
jackson-databind@2.9.5
2.18.11
2
gradiant/spark:2.4.4-python-alpine97657d56e927
jackson-databind@2.6.7.1
2.18.11
2
graviteeio/apim-gateway:4.12.20-debian8f1a14449381
jackson-databind@2.18.1
2.18.11
2
graviteeio/apim-management-api:4.12.20-debiand30d085395ca
jackson-databind@2.21.2
2.21.7
2
hazelcast/management-center:5.5.29241de019fc7
jackson-databind@2.17.2
2.18.11
2
hookiesolutions/webhookie:latest0629694246ba
jackson-databind@2.13.1
2.18.11
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
jackson-databind@2.13.2.2
2.18.11
2
inaccel/coral:2.18c53744ed70b
jackson-databind@2.13.5
2.18.11
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
jackson-databind@2.15.2
2.18.11
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
jackson-databind@2.20.1
2.21.7
2
library/cassandra:4.1.37cbcec0086ac
jackson-databind@2.13.2.2
2.18.11
2
library/elasticsearch:7.17.35e6ac15bf6a5
jackson-databind@2.10.4
2.18.11
2
library/elasticsearch:8.19.22d071f96fab6c
jackson-databind@2.21.6
2.21.7
2
library/neo4j:5.20.052d3dec8d455
jackson-databind@2.17.0
2.18.11
2
library/neo4j:4.3.2-enterprise56a9453c4064
jackson-databind@2.10.5.1
2.18.11
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
jackson-databind@2.8.4
2.18.11
2
mbentley/omada-controller:4.3f4e682274bed
jackson-databind@2.9.8
2.18.11
2
metabase/metabase:v0.45.21fb334ce4820
jackson-databind@2.13.4.2
2.18.11
2
metabase/metabase:v0.61.1.x9491ed11c901
jackson-databind@2.21.2
2.21.7
2
nacos/nacos-server:latest1c191c30c8cd
jackson-databind@2.21.2
2.21.7
2
nacos/nacos-server:v2.1.0dcf04549c6d7
jackson-databind@2.12.2
2.18.11
2
nacos/nacos-server:1.4.1fe6e5688cdf3
jackson-databind@2.10.4
2.18.11
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
jackson-databind@2.13.2.2
2.18.11
2
opensearchproject/opensearch:2.1.04254021a8c71
jackson-databind@2.13.2.2
2.18.11
2
opensearchproject/opensearch:2.18.07f6fa1efee8f
jackson-databind@2.17.2
2.18.11
2

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.