CLEANSTART-2026-EI25090: pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the rundeck package. pgjdbc, the PostgreSQL JDBC Driver, versions 42.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/rundeckto a version that resolves this vulnerability.Fixed in 6.0.1-r11
Event History
Frequently Asked Questions
What access does an attacker need?
The CVSS vector indicates network reachability and low privileges are required. Exploitation has high attack complexity and does not require user interaction.
What is the expected security impact if exploitation succeeds?
The reported impact is high confidentiality impact. Integrity and availability impacts are listed as none, and the vulnerability does not affect another security authority scope.
Which deployments should be prioritized for review?
Deployments using the cleanstart/rundeck package should be reviewed, particularly where an attacker could reach the relevant service over the network and obtain low-level authenticated access.