StackRadar

GHSA-mhm7-754m-9p8w

Medium

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
197
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.18.0, 2.18.1, 2.18.2, 2.18.3+9 more2.18.9, 2.21.5195
OSV records
GHSA-mhm7-754m-9p8w

Charts affected

197 by stars
ChartLatestAffected imagesRadar Score
mod-auditfolio-org0.1.361 of 1See more

mod-audit folio-org 0.1.36

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-audit:latest88f40730ed45
jackson-databind@2.21.4
2.21.5

Open the chart page →

267
mod-calendarfolio-org0.1.341 of 1See more

mod-calendar folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-calendar:latest22f65982efd7
jackson-databind@2.21.4
2.21.5

Open the chart page →

415
mod-circulationfolio-org0.1.351 of 1See more

mod-circulation folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-circulation:latest3eecd2ac2d8a
jackson-databind@2.18.6
2.18.9

Open the chart page →

497
mod-circulation-storagefolio-org0.1.351 of 1See more

mod-circulation-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-circulation-storage:latest6bdddcafbc0f
jackson-databind@2.18.6
2.18.9

Open the chart page →

658
mod-configurationfolio-org0.1.341 of 1See more

mod-configuration folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-configuration:latestdd0cdc89670a
jackson-databind@2.18.6
2.18.9

Open the chart page →

711
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,466
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
jackson-databind@2.18.2
2.18.9

Open the chart page →

1,533
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
jackson-databind@2.18.2
2.18.9

Open the chart page →

866
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
jackson-databind@2.18.6
2.18.9

Open the chart page →

563
mod-event-configfolio-org0.1.341 of 1See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-event-config:latest0192adad3897
jackson-databind@2.21.4
2.21.5

Open the chart page →

420
mod-feesfinesfolio-org0.1.341 of 1See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-feesfines:latestfe3a7049f2fb
jackson-databind@2.18.2
2.18.9

Open the chart page →

663
mod-financefolio-org0.1.341 of 1See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-finance:latest14450bc15430
jackson-databind@2.21.4
2.21.5

Open the chart page →

534
mod-inn-reachfolio-org0.1.71 of 1See more

mod-inn-reach folio-org 0.1.7

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-inn-reach:latestcc8584e43382
jackson-databind@2.21.4
2.21.5

Open the chart page →

512
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
jackson-databind@2.18.2
2.18.9

Open the chart page →

878
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
jackson-databind@2.21.4
2.21.5

Open the chart page →

568
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,760
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
jackson-databind@2.21.2
2.21.5

Open the chart page →

1,088
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
jackson-databind@2.21.4
2.21.5

Open the chart page →

271
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
jackson-databind@2.18.2
2.18.9

Open the chart page →

962
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
jackson-databind@2.18.6
2.18.9

Open the chart page →

808
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
jackson-databind@2.21.4
2.21.5

Open the chart page →

665
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
jackson-databind@2.21.4
2.21.5

Open the chart page →

394
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
jackson-databind@2.18.2
2.18.9

Open the chart page →

827
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,214
mod-pubsubfolio-org0.1.341 of 1See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-pubsub:latest0a4fa4ad5d72
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,009
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
jackson-databind@2.21.4
2.21.5

Open the chart page →

571
mod-rtacfolio-org0.1.341 of 1See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-rtac:latestc959b2d6142f
jackson-databind@2.18.2
2.18.9

Open the chart page →

665
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
jackson-databind@2.18.2
2.18.9

Open the chart page →

818
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
jackson-databind@2.21.4
2.21.5

Open the chart page →

342
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
jackson-databind@2.18.2
2.18.9

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,214
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
jackson-databind@2.21.4
2.21.5

Open the chart page →

430
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
jackson-databind@2.18.2
2.18.9

Open the chart page →

1,321
geysergeyserVerified publisher0.1.31 of 1See more

geyser geyser 0.1.3

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
jackson-databind@2.18.0
2.18.9

Open the chart page →

350
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
jackson-databind@2.18.0
2.18.9

Open the chart page →

49,025
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jackson-databind@2.21.3
2.21.5

Open the chart page →

4,556
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jackson-databind@2.21.0
2.21.5

Open the chart page →

3,199
hello-world-apihello-world-api0.0.51 of 1See more

hello-world-api hello-world-api 0.0.5

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
fabioformosa/hello-world-api:latest063873af085c
jackson-databind@2.18.3
2.18.9

Open the chart page →

1,417
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
alfio/alf.io:2.0-M5-26060c836a081446
jackson-databind@2.21.2
2.21.5

Open the chart page →

2,091
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
jackson-databind@2.21.4
2.21.5

Open the chart page →

2,280
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jackson-databind@2.18.0
2.18.9

Open the chart page →

9,920
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
jackson-databind@2.21.2
2.21.5

Open the chart page →

2,476
kibanahelmforgeVerified publisher1.1.71 of 3See more

kibana helmforge 1.1.7

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.18.8
2.18.9

Open the chart page →

341
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
jackson-databind@2.21.4
2.21.5

Open the chart page →

2,261
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.3.2798cf28e226a
jackson-databind@2.18.2
2.18.9

Open the chart page →

25,017
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
jackson-databind@2.21.3
2.21.5

Open the chart page →

26,612
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@2.21.2
2.21.5

Open the chart page →

57,669

Container images carrying it

195 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
folioci/edge-caiasoft:latestc3cfa89eee2f
jackson-databind@2.21.4
2.21.5
1
folioci/edge-connexion:latestb4863d135524
jackson-databind@2.18.2
2.18.9
1
folioci/edge-dematic:latest48c9b1d180d4
jackson-databind@2.21.4
2.21.5
1
folioci/edge-inn-reach:latestc64e4d9dd3fc
jackson-databind@2.21.4
2.21.5
1
folioci/edge-ncip:lateste760dbb81d1a
jackson-databind@2.18.2
2.18.9
1
folioci/edge-oai-pmh:latesteedfcbc29792
jackson-databind@2.18.2
2.18.9
1
folioci/edge-orders:latest1ef654ee9f23
jackson-databind@2.18.6
2.18.9
1
folioci/edge-patron:latest682b852e056d
jackson-databind@2.18.2
2.18.9
1
folioci/edge-sip2:latest86106f20ef51
jackson-databind@2.21.4
2.21.5
1
folioci/mod-audit:latest88f40730ed45
jackson-databind@2.21.4
2.21.5
1
folioci/mod-calendar:latest22f65982efd7
jackson-databind@2.21.4
2.21.5
1
folioci/mod-circulation:latest3eecd2ac2d8a
jackson-databind@2.18.6
2.18.9
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
jackson-databind@2.18.6
2.18.9
1
folioci/mod-configuration:latestdd0cdc89670a
jackson-databind@2.18.6
2.18.9
1
folioci/mod-copycat:latest1513fad2b799
jackson-databind@2.18.6
2.18.9
1
folioci/mod-courses:latest68ca414f5596
jackson-databind@2.18.2
2.18.9
1
folioci/mod-email:latest79ea8e2e7ebf
jackson-databind@2.18.2
2.18.9
1
folioci/mod-erm-usage-harvester:latest2d6767933c59
jackson-databind@2.18.6
2.18.9
1
folioci/mod-event-config:latest0192adad3897
jackson-databind@2.21.4
2.21.5
1
folioci/mod-feesfines:latestfe3a7049f2fb
jackson-databind@2.18.2
2.18.9
1
folioci/mod-finance:latest14450bc15430
jackson-databind@2.21.4
2.21.5
1
folioci/mod-inn-reach:latestcc8584e43382
jackson-databind@2.21.4
2.21.5
1
folioci/mod-inventory-update:latestba84812b4d58
jackson-databind@2.18.2
2.18.9
1
folioci/mod-invoice:latest45b7b13e81e1
jackson-databind@2.21.4
2.21.5
1
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@2.18.7
2.18.9
1
folioci/mod-login-saml:latest5f3358ccaa0f
jackson-databind@2.21.2
2.21.5
1
folioci/mod-notify:latesta8c1a90005fc
jackson-databind@2.21.4
2.21.5
1
folioci/mod-oa:latestae3b069d4ba5
jackson-databind@2.18.7
2.18.9
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
jackson-databind@2.18.2
2.18.9
1
folioci/mod-organizations:latest7dc9ccf3d937
jackson-databind@2.18.6
2.18.9
1
folioci/mod-organizations-storage:lateste46892405fde
jackson-databind@2.21.4
2.21.5
1
folioci/mod-password-validator:latestb31d75f2bf7b
jackson-databind@2.21.4
2.21.5
1
folioci/mod-patron:latest5f213acfe2f8
jackson-databind@2.18.2
2.18.9
1
folioci/mod-permissions:latest5363e98c6299
jackson-databind@2.18.6
2.18.9
1
folioci/mod-pubsub:latest0a4fa4ad5d72
jackson-databind@2.18.6
2.18.9
1
folioci/mod-remote-storage:latest4f12177123dc
jackson-databind@2.21.4
2.21.5
1
folioci/mod-rtac:latestc959b2d6142f
jackson-databind@2.18.2
2.18.9
1
folioci/mod-sender:latestd88a675dddf0
jackson-databind@2.18.2
2.18.9
1
folioci/mod-serials-management:latest571fa1ffe8c9
jackson-databind@2.18.7
2.18.9
1
folioci/mod-service-interaction:latestf53c327a48e8
jackson-databind@2.18.7
2.18.9
1
folioci/mod-tags:latest6e8beeb70272
jackson-databind@2.21.4
2.21.5
1
folioci/mod-template-engine:latestd105c585da30
jackson-databind@2.18.2
2.18.9
1
folioci/mod-user-import:latest1807734472bd
jackson-databind@2.18.6
2.18.9
1
folioci/mod-users:latest6f60033321b0
jackson-databind@2.21.4
2.21.5
1
folioci/mod-users-bl:latest4e2d96c9340d
jackson-databind@2.18.2
2.18.9
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
jackson-databind@2.21.0
2.21.5
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
jackson-databind@2.21.0
2.21.5
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
jackson-databind@2.21.0
2.21.5
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
jackson-databind@2.21.0
2.21.5
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
jackson-databind@2.21.0
2.21.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.