CLEANSTART-2026-FJ26239: jackson-databind's deserializer for java
Published Oct 30, 2026
·Updated
Security vulnerability affects the sonarqube package. jackson-databind's deserializer for java.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.9.0.129388-r1
26.9.0.129388-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.9.0.129388-r1
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The reported CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.
2
What is the reported security impact?
The reported impact is limited to low availability impact. No confidentiality or integrity impact is listed in the CVSS vector.