CLEANSTART-2026-AD03048: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Published Oct 30, 2026
·Updated
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.9.0.129388-r0
26.9.0.129388-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.9.0.129388-r0
Event History
Oct 30, 2026
Advisory Published
via OSV·12:35 AM
Data Sourced
via OSV·12:35 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vector indicates network-reachable exploitation with low attack complexity. The attacker must have low privileges, and no user interaction is required.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high integrity impact, meaning an attacker may be able to modify data or system state. No confidentiality or availability impact is indicated.
3
Does exploitation affect resources beyond the vulnerable component's security authority?
No. The reported scope is unchanged.