StackRadar

GHSA-r7wm-3cxj-wff9

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
883
of 17,787 indexed, latest versions
Container images
893
deployed by those charts
Fix available
1 of 1
affected package

jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)

Carried by container images the latest versions of 883 of 17,787 indexed charts deploy, on 893 images.

Affected packageAffected versionsFixed inImages
jackson-coremaven2.0.5, 2.2.3, 2.3.0, 2.3.3+89 more2.18.8, 2.21.4, 3.1.4893
OSV records
GHSA-r7wm-3cxj-wff9

Charts affected

883 by stars
ChartLatestAffected imagesRadar Score
kafkatwomartensVerified publisher0.2.11 of 2See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:latest0ad069035863
jackson-core@2.21.2
2.21.4

Open the chart page →

1,569
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
jackson-core@2.19.2
2.21.4

Open the chart page →

1,527
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
jackson-core@2.19.2
2.21.4

Open the chart page →

1,690
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
jackson-core@2.16.0
2.18.8

Open the chart page →

1,733
opencloudunxwaresVerified publisher0.2.32 of 13See more

opencloud unxwares 0.2.3

2 of the 13 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
jackson-core@2.17.0
2.18.8
quay.io/keycloak/keycloak:26.1.4044a457e0498
jackson-core@2.17.2
2.18.8

Open the chart page →

45,392
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jackson-core@2.8.4
2.18.8

Open the chart page →

4,302
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
jackson-core@2.12.4
2.18.8

Open the chart page →

7,892
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
jackson-core@2.11.0
2.18.8

Open the chart page →

20,233
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.49c344d2b1757
jackson-core@2.18.2
2.18.8

Open the chart page →

5,484
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jackson-core@2.6.7
2.18.8

Open the chart page →

4,649
queryservice-updaterwbstack0.3.01 of 1See more

queryservice-updater wbstack 0.3.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
jackson-core@2.9.8
2.18.8

Open the chart page →

3,176
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
jackson-core@2.13.2
2.18.8
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
jackson-core@2.15.2
2.18.8

Open the chart page →

9,399
webapp-db-javawebapp-db-java-repo0.1.01 of 2See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
arturisimo/webapp-db-java:v2c95524e90b57
jackson-core@2.13.1
2.18.8

Open the chart page →

2,566
jenkinswebencryptor1.9.181 of 1See more

jenkins webencryptor 1.9.18

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
jackson-core@2.20.1
2.21.4

Open the chart page →

2,487
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
jackson-core@2.8.11
2.18.8

Open the chart page →

5,462
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
jackson-core@2.13.1
2.18.8

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
jackson-core@2.13.1
2.18.8
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jackson-core@2.12.1
2.18.8

Open the chart page →

28,699
hazelcastwenerme5.10.32 of 2See more

hazelcast wenerme 5.10.3

2 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
jackson-core@2.17.2
2.18.8
hazelcast/management-center:5.5.20095e0320623
jackson-core@2.17.2
2.18.8

Open the chart page →

2,623
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
jackson-core@2.13.2
2.18.8

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
jackson-core@2.15.0
2.18.8

Open the chart page →

2,229
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
jackson-core@2.19.2
2.21.4

Open the chart page →

7,643
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
jackson-core@2.21.2
2.21.4

Open the chart page →

1,640
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
jackson-core@2.11.3
2.18.8

Open the chart page →

3,424
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
jackson-core@2.10.5
2.18.8

Open the chart page →

5,807
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
jackson-core@2.15.3
2.18.8

Open the chart page →

11,592
is-pattern-1wso2is-pattern15.11.01 of 2See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
massimolauri/wso2is:5.11.0-centose08abf0ce767
jackson-core@2.5.4
2.18.8

Open the chart page →

6,213
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
jackson-core@2.17.2
2.18.8

Open the chart page →

9,381
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
jackson-core@2.15.2
2.18.8

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
jackson-core@2.13.4
2.18.8
zahoriaut/zahori-server:0.1.17b2de13916f3e
jackson-core@2.14.2
2.18.8

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jackson-core@2.13.4
2.18.8

Open the chart page →

6,016
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
jackson-core@2.18.0
2.18.8

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry GHSA-r7wm-3cxj-wff9.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
jackson-core@2.21.2
2.21.4

Open the chart page →

1,159

Container images carrying it

893 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
stakater/stakater-nordmart-review:1.0.35954d2be66e95
jackson-core@2.13.3
2.18.8
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
jackson-core@2.19.1
2.21.4
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
jackson-core@2.21.2
2.21.4
2
ghcr.io/it-at-m/refarch/refarch-gateway:1.10.0d74e6a31e2fe
jackson-core@2.17.2
2.18.8
2
ghcr.io/kafbat/kafka-ui:v1.5.07cda86a33344
jackson-core@2.21.2
2.21.4
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
jackson-core@2.13.3
2.18.8
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
jackson-core@2.19.0
2.21.4
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
jackson-core@2.17.2
2.18.8
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
jackson-core@2.13.4
2.18.8
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jackson-core@2.11.4
2.18.8
2
quay.io/strimzi/drain-cleaner:1.6.15fb28e9f30d0
jackson-core@2.21.2
2.21.4
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
jackson-core@2.15.3
2.18.8
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
jackson-core@2.18.3
2.18.8
2
1dev/server:11.9.0cd5b12fe5471
jackson-core@2.14.0-rc1
2.18.8
1
2martens/configserver:latestbf1cdb80239d
jackson-core@2.17.2
2.18.8
1
2martens/timetable:latestbd1ba6ab84c9
jackson-core@2.19.2
2.21.4
1
2martens/wahlrecht:latestba2c3040dab0
jackson-core@2.19.2
2.21.4
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
jackson-core@2.19.4
2.21.4
1
5200710/hadoop:3.2.3-java8092d3088a5fb
jackson-core@2.12.7
2.18.8
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jackson-core@2.9.4
2.18.8
1
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
jackson-core@2.21.2
2.21.4
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
jackson-core@3.1.2
3.1.4
1
adagber/planner:v1.0e5c1ed097752
jackson-core@2.13.0
2.18.8
1
adeptiainc/adeptia-connect-migration:5.2.98607f4f29732
jackson-core@2.19.4
2.21.4
1
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
jackson-core@2.21.1
2.21.4
1
adityaprasadpathak/myapp:3.07e3b9777362c
jackson-core@2.17.1
2.18.8
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
jackson-core@2.17.2
2.18.8
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
jackson-core@2.17.1
2.18.8
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
jackson-core@2.18.4.1
2.18.8
1
airbyte/airbyte-api-server:0.63.8e1c5e7cfec8a
jackson-core@2.17.1
2.18.8
1
airbyte/bootloader:2.2.0f71cf4e185d5
jackson-core@2.20.1
2.21.4
1
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
jackson-core@2.20.1
2.21.4
1
airbyte/cron:0.40.17caf4f551c546
jackson-core@2.13.4
2.18.8
1
airbyte/cron:2.2.0d97b67a1346d
jackson-core@2.20.1
2.21.4
1
airbyte/server:2.2.070e125498a1c
jackson-core@2.20.1
2.21.4
1
airbyte/worker:2.2.08060b88b29c8
jackson-core@2.20.1
2.21.4
1
airbyte/workload-api-server:2.2.042093cff86e9
jackson-core@2.20.1
2.21.4
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
jackson-core@2.12.3
2.18.8
1
aktosecurity/akto-api-protection:localbcd7382c9c1b
jackson-core@2.16.1
2.18.8
1
aktosecurity/data-ingestion-service213aded7adc5
jackson-core@2.16.1
2.18.8
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
jackson-core@2.16.1
2.18.8
1
aktosecurity/source-code-analyser:a-1703-merge274042ed7a53
jackson-core@2.16.1
2.18.8
1
alfio/alf.io:2.0-M5-26060c836a081446
jackson-core@2.21.2
2.21.4
1
alfresco/alfresco-activemq:5.18.7-jre17-rockylinux85472f88d9b0b
jackson-core@2.18.2
2.18.8
1
amartinm82/planner:v2.01184353ff57b
jackson-core@2.11.3
2.18.8
1
amazon/dynamodb-local:1.20.01ed00881c937
jackson-core@2.12.7
2.18.8
1
amazon/dynamodb-local:1.12.08414d80019b0
jackson-core@2.6.7
2.18.8
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
jackson-core@2.8.11
2.18.8
1
andrianrf/backoffice-be:latest6036614803d4
jackson-core@2.13.5
2.18.8
1
andrianrf/bpjstk-service:latest46abe878d9d8
jackson-core@2.11.2
2.18.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.