StackRadar

GHSA-mhm7-754m-9p8w

Medium

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
197
of 17,781 indexed, latest versions
Container images
195
deployed by those charts
Fix available
1 of 1
affected package

jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 195 images.

Affected packageAffected versionsFixed inImages
jackson-databindmaven2.18.0, 2.18.1, 2.18.2, 2.18.3+9 more2.18.9, 2.21.5195
OSV records
GHSA-mhm7-754m-9p8w

Charts affected

197 by stars
ChartLatestAffected imagesRadar Score
mod-auditfolio-org0.1.361 of 1See more

mod-audit folio-org 0.1.36

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-audit:latest88f40730ed45
jackson-databind@2.21.4
2.21.5

Open the chart page →

267
mod-calendarfolio-org0.1.341 of 1See more

mod-calendar folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-calendar:latest22f65982efd7
jackson-databind@2.21.4
2.21.5

Open the chart page →

415
mod-circulationfolio-org0.1.351 of 1See more

mod-circulation folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-circulation:latest3eecd2ac2d8a
jackson-databind@2.18.6
2.18.9

Open the chart page →

497
mod-circulation-storagefolio-org0.1.351 of 1See more

mod-circulation-storage folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-circulation-storage:latest6bdddcafbc0f
jackson-databind@2.18.6
2.18.9

Open the chart page →

658
mod-configurationfolio-org0.1.341 of 1See more

mod-configuration folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-configuration:latestdd0cdc89670a
jackson-databind@2.18.6
2.18.9

Open the chart page →

711
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,466
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
jackson-databind@2.18.2
2.18.9

Open the chart page →

1,533
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
jackson-databind@2.18.2
2.18.9

Open the chart page →

866
mod-erm-usage-harvesterfolio-org0.1.341 of 1See more

mod-erm-usage-harvester folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-erm-usage-harvester:latest2d6767933c59
jackson-databind@2.18.6
2.18.9

Open the chart page →

563
mod-event-configfolio-org0.1.341 of 1See more

mod-event-config folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-event-config:latest0192adad3897
jackson-databind@2.21.4
2.21.5

Open the chart page →

420
mod-feesfinesfolio-org0.1.341 of 1See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-feesfines:latestfe3a7049f2fb
jackson-databind@2.18.2
2.18.9

Open the chart page →

663
mod-financefolio-org0.1.341 of 1See more

mod-finance folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-finance:latest14450bc15430
jackson-databind@2.21.4
2.21.5

Open the chart page →

534
mod-inn-reachfolio-org0.1.71 of 1See more

mod-inn-reach folio-org 0.1.7

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-inn-reach:latestcc8584e43382
jackson-databind@2.21.4
2.21.5

Open the chart page →

512
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
jackson-databind@2.18.2
2.18.9

Open the chart page →

878
mod-invoicefolio-org0.1.351 of 1See more

mod-invoice folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-invoice:latest45b7b13e81e1
jackson-databind@2.21.4
2.21.5

Open the chart page →

568
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,760
mod-login-samlfolio-org0.1.341 of 1See more

mod-login-saml folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-login-saml:latest5f3358ccaa0f
jackson-databind@2.21.2
2.21.5

Open the chart page →

1,088
mod-notifyfolio-org0.1.341 of 1See more

mod-notify folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-notify:latesta8c1a90005fc
jackson-databind@2.21.4
2.21.5

Open the chart page →

271
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
jackson-databind@2.18.2
2.18.9

Open the chart page →

962
mod-organizationsfolio-org0.1.341 of 1See more

mod-organizations folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-organizations:latest7dc9ccf3d937
jackson-databind@2.18.6
2.18.9

Open the chart page →

808
mod-organizations-storagefolio-org0.1.341 of 1See more

mod-organizations-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-organizations-storage:lateste46892405fde
jackson-databind@2.21.4
2.21.5

Open the chart page →

665
mod-password-validatorfolio-org0.1.341 of 1See more

mod-password-validator folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-password-validator:latestb31d75f2bf7b
jackson-databind@2.21.4
2.21.5

Open the chart page →

394
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
jackson-databind@2.18.2
2.18.9

Open the chart page →

827
mod-permissionsfolio-org0.1.351 of 1See more

mod-permissions folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-permissions:latest5363e98c6299
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,214
mod-pubsubfolio-org0.1.341 of 1See more

mod-pubsub folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-pubsub:latest0a4fa4ad5d72
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,009
mod-remote-storagefolio-org0.1.321 of 1See more

mod-remote-storage folio-org 0.1.32

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-remote-storage:latest4f12177123dc
jackson-databind@2.21.4
2.21.5

Open the chart page →

571
mod-rtacfolio-org0.1.341 of 1See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-rtac:latestc959b2d6142f
jackson-databind@2.18.2
2.18.9

Open the chart page →

665
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
jackson-databind@2.18.2
2.18.9

Open the chart page →

818
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
jackson-databind@2.18.7
2.18.9

Open the chart page →

1,733
mod-tagsfolio-org0.1.341 of 1See more

mod-tags folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-tags:latest6e8beeb70272
jackson-databind@2.21.4
2.21.5

Open the chart page →

342
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
jackson-databind@2.18.2
2.18.9

Open the chart page →

818
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
jackson-databind@2.18.6
2.18.9

Open the chart page →

1,214
mod-usersfolio-org0.1.341 of 1See more

mod-users folio-org 0.1.34

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-users:latest6f60033321b0
jackson-databind@2.21.4
2.21.5

Open the chart page →

430
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
jackson-databind@2.18.2
2.18.9

Open the chart page →

1,321
geysergeyserVerified publisher0.1.31 of 1See more

geyser geyser 0.1.3

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ghcr.io/joffreybvn/k8s-geyser:0.0.247f36880072e
jackson-databind@2.18.0
2.18.9

Open the chart page →

350
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
jackson-databind@2.18.0
2.18.9

Open the chart page →

49,025
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
jackson-databind@2.21.3
2.21.5

Open the chart page →

4,556
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
jackson-databind@2.21.0
2.21.5

Open the chart page →

3,199
hello-world-apihello-world-api0.0.51 of 1See more

hello-world-api hello-world-api 0.0.5

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
fabioformosa/hello-world-api:latest063873af085c
jackson-databind@2.18.3
2.18.9

Open the chart page →

1,417
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
alfio/alf.io:2.0-M5-26060c836a081446
jackson-databind@2.21.2
2.21.5

Open the chart page →

2,091
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
jackson-databind@2.21.4
2.21.5

Open the chart page →

2,280
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
jackson-databind@2.18.0
2.18.9

Open the chart page →

9,920
jenkinshelmforgeVerified publisher1.0.91 of 1See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-lts-jdk21c1e4c349365f
jackson-databind@2.21.2
2.21.5

Open the chart page →

2,476
kibanahelmforgeVerified publisher1.1.71 of 3See more

kibana helmforge 1.1.7

1 of the 3 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.18.8
2.18.9

Open the chart page →

341
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
jackson-databind@2.21.4
2.21.5

Open the chart page →

2,261
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.3.2798cf28e226a
jackson-databind@2.18.2
2.18.9

Open the chart page →

25,017
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
jackson-databind@2.21.3
2.21.5

Open the chart page →

26,612
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry GHSA-mhm7-754m-9p8w.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-databind@2.21.2
2.21.5

Open the chart page →

57,669

Container images carrying it

195 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
jackson-databind@2.21.0
2.21.5
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
jackson-databind@2.21.0
2.21.5
1
glarad/mc-service-registry:latest7b02b9e7f1ef
jackson-databind@2.21.4
2.21.5
1
gotson/komga:1.22.0ba892ab3e082
jackson-databind@2.18.1
2.18.9
1
graviteeio/ae-engine:3.0.24140932887e0
jackson-databind@2.18.3
2.18.9
1
graviteeio/am-gateway:4.12.607b7f6dc267a
jackson-databind@2.21.3
2.21.5
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
jackson-databind@2.21.3
2.21.5
1
graylog/graylog:7.1.9598bd41fefd5
jackson-databind@2.21.2
2.21.5
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jackson-databind@2.21.2
2.21.5
1
gridgain/gridgain9:9.1.1895018390077b
jackson-databind@2.21.0
2.21.5
1
hazelcast/hazelcast:latestf086bf0ecb23
jackson-databind@2.21.2
2.21.5
1
keyfactor/signserver-ce:7.3.2798fbbe00283
jackson-databind@2.18.2
2.18.9
1
labs64/auditflowc7b26d3ca11c
jackson-databind@2.21.4
2.21.5
1
labs64/payment-gateway:0.0.10c66feefca17
jackson-databind@2.21.4
2.21.5
1
library/convertigo:8.4.3ae605bfcda05
jackson-databind@2.21.3
2.21.5
1
library/elasticsearch:9.5.19656a9ca03f8
jackson-databind@2.18.8
2.18.9
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
jackson-databind@2.21.3
2.21.5
1
library/neo4j:2026.05.06c162e2432f8
jackson-databind@2.21.3
2.21.5
1
linuxserver/unifi-network-application:10.6.101-ls144b6ce6968ee45
jackson-databind@2.21.2
2.21.5
1
metabase/metabase:v0.53.4.17807bc5cad17
jackson-databind@2.18.0
2.18.9
1
nacos/nacos-server:v3.0.20e951a1d07bb
jackson-databind@2.18.3
2.18.9
1
nacos/nacos-server:v3.0.130a39cb0c54d
jackson-databind@2.18.3
2.18.9
1
openhab/openhab:5.2.1bfd4a60e90da
jackson-databind@2.21.4
2.21.5
1
opennms/sentinel:36.0.288869082a14f
jackson-databind@2.21.3
2.21.5
1
opensearchproject/opensearch:3.1.0474ea3fdf25d
jackson-databind@2.18.2
2.18.9
1
opensearchproject/opensearch:2.19.269588c664014
jackson-databind@2.18.2
2.18.9
1
opensearchproject/opensearch:3.3.2798cf28e226a
jackson-databind@2.18.2
2.18.9
1
opensearchproject/opensearch:2.19.68690b204fe91
jackson-databind@2.18.8
2.18.9
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
jackson-databind@2.21.2
2.21.5
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
jackson-databind@2.18.3
2.18.9
1
payara/micro:7.2026.2-jdk25fb44b8ce1cb2
jackson-databind@2.21.0
2.21.5
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
jackson-databind@2.21.0
2.21.5
1
reportportal/service-api:5.15.4bf193091525a
jackson-databind@2.21.2
2.21.5
1
reportportal/service-authorization:5.15.16a954407b417
jackson-databind@2.21.4
2.21.5
1
resurfaceio/resurface:3.7.84d5cda2f64109
jackson-databind@2.18.2
2.18.9
1
scmmanager/scm-manager:3.12.1bfb766050f34
jackson-databind@2.21.1
2.21.5
1
siakhooi/query:1.0.0f1f4b5b1b870
jackson-databind@2.21.2
2.21.5
1
stardog/stardog:latest2714e5c4b3c1
jackson-databind@2.18.3
2.18.9
1
sysnet4admin/colosseum-agg:logbc25b152d88e
jackson-databind@2.18.2
2.18.9
1
tchiotludo/akhq:0.28.0c2824dc2ae44
jackson-databind@2.21.4
2.21.5
1
thingsboard/tb-postgres:latest2d17e4e36edc
jackson-databind@2.18.4
2.18.9
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
jackson-databind@2.21.2
2.21.5
1
traccar/traccar:6.7-alpine621c8d6d46fd
jackson-databind@2.18.2
2.18.9
1
trinodb/trino:4801565e8cac299
jackson-databind@2.21.2
2.21.5
1
trinodb/trino:4815b5e0a97f599
jackson-databind@2.21.3
2.21.5
1
vespaengine/vespa:8.526.1569b160f58211
jackson-databind@2.18.3
2.18.9
1
vincentgwzhang/k8sforjava:latesta9139f2cd98f
jackson-databind@2.18.2
2.18.9
1
wazuh/wazuh-indexer:4.14.49c344d2b1757
jackson-databind@2.18.2
2.18.9
1
wazuh/wazuh-indexer:4.14.3b149b30da686
jackson-databind@2.18.2
2.18.9
1
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
jackson-databind@2.21.4
2.21.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.