StackRadar

GHSA-r7wm-3cxj-wff9

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
875
of 17,790 indexed, latest versions
Container images
880
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

Carried by container images the latest versions of 875 of 17,790 indexed charts deploy, on 880 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.0.5, 2.2.3, 2.3.0, 2.3.3+89 more2.18.8, 2.21.4, 3.1.4880
OSV records
GHSA-r7wm-3cxj-wff9

Charts affected

875 by stars
ChartLatestAffected imagesRadar Score
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
jackson-core@2.17.2
2.18.8

Open the chart page →

2,097
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
jackson-core@3.1.3
3.1.4

Open the chart page →

4,315
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
jackson-core@2.9.8
2.18.8

Open the chart page →

5,595
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
todo-apipb-todo-api-v10.1.01 of 2See more

todo-api pb-todo-api-v1 0.1.0

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
jackson-core@2.12.3
2.18.8

Open the chart page →

2,544
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
jackson-core@2.4.0
2.18.8

Open the chart page →

6,236
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
jackson-core@2.13.4
2.18.8

Open the chart page →

7,616
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jackson-core@2.9.4
2.18.8

Open the chart page →

4,177
Practica_4_helmpr04helm0.1.03 of 7See more

Practica_4_helm pr04helm 0.1.0

3 of the 7 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
jackson-core@2.13.4
2.18.8
codeurjc/toposervice:v1.09fb4c11e6a49
jackson-core@2.14.1
2.18.8
pcarrascoponce/planner:v1.0981fc482442c
jackson-core@2.13.0
2.18.8

Open the chart page →

27,649
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
jackson-core@2.11.3
2.18.8
slagattollas/toposervice-practica:latestdc63973dae0d
jackson-core@2.11.3
2.18.8

Open the chart page →

28,495
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
jackson-core@2.15.0
2.18.8

Open the chart page →

3,316
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jackson-core@2.9.5
2.18.8

Open the chart page →

9,605
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
jackson-core@2.20.1
2.21.4

Open the chart page →

2,264
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
jackson-core@2.13.3
2.18.8

Open the chart page →

2,564
prometheus-cloudwatch-exporterprometheus-worawutchan0.12.01 of 1See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.8.0fc4b9b9f5e15
jackson-core@2.9.10
2.18.8

Open the chart page →

2,831
punchline-javapunchplatform8.1.11 of 1See more

punchline-java punchplatform 8.1.1

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/punchplatform/punchline-java:8.1.1d46ce7b96482
jackson-core@2.14.1
2.18.8

Open the chart page →

1,995
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
jackson-core@2.17.1
2.18.8
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
jackson-core@2.17.2
2.18.8

Open the chart page →

20,812
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
jackson-core@2.14.2
2.18.8

Open the chart page →

2,075
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
jackson-core@2.20.2
2.21.4

Open the chart page →

2,457
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
jackson-core@2.20.2
2.21.4

Open the chart page →

2,058
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
jackson-core@2.16.1
2.18.8

Open the chart page →

3,221
mockserverradar-baseVerified publisher5.15.01 of 1See more

mockserver radar-base 5.15.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
jackson-core@2.14.1
2.18.8

Open the chart page →

1,257
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
jackson-core@2.14.2
2.18.8

Open the chart page →

5,269
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
jackson-core@2.20.2
2.21.4

Open the chart page →

2,322
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
jackson-core@2.16.1
2.18.8

Open the chart page →

2,893
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jackson-core@2.18.3
2.18.8

Open the chart page →

4,236

Container images carrying it

880 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.60aae0de7fca8
jackson-core@2.21.2
2.21.4
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jackson-core@2.12.1
2.18.8
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
jackson-core@2.17.2
2.18.8
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
jackson-core@2.16.1
2.18.8
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
jackson-core@2.15.2
2.18.8
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
jackson-core@2.18.2
2.18.8
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
jackson-core@2.13.4
2.18.8
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
jackson-core@2.19.2
2.21.4
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
jackson-core@2.19.2
2.21.4
1
quay.io/keycloak/keycloak:26.6.39b0330756022
jackson-core@2.21.2
2.21.4
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
jackson-core@2.17.2
2.18.8
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jackson-core@2.13.4
2.18.8
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
jackson-core@2.13.4
2.18.8
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
jackson-core@2.21.2
2.21.4
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
jackson-core@2.20.0
2.21.4
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
jackson-core@2.21.2
2.21.4
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
jackson-core@2.15.3
2.18.8
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
jackson-core@2.19.2
2.21.4
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jackson-core@2.10.1
2.18.8
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
jackson-core@2.14.1
2.18.8
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
jackson-core@2.15.3
2.18.8
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
jackson-core@2.15.3
2.18.8
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
jackson-core@2.15.3
2.18.8
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
jackson-core@2.17.2
2.18.8
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
jackson-core@2.13.5
2.18.8
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
jackson-core@2.12.3
2.18.8
1
quay.io/strimzi/operator:0.45.158c727cd2e68
jackson-core@2.16.2
2.18.8
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
jackson-core@2.14.2
2.18.8
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
jackson-core@2.17.2
2.18.8
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
jackson-core@2.18.0
2.18.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.