CLEANSTART-2026-FT62992: Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
Security vulnerability affects the solr package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/solrto a version that resolves this vulnerability.Fixed in 9.11.0-r0
Event History
Frequently Asked Questions
What level of attacker access is indicated for exploitation?
The severity vector indicates network-reachable exploitation with low attack complexity. It also indicates that no privileges and no user interaction are required.
What is the expected security impact?
The reported impact is high availability impact. The severity vector indicates no confidentiality or integrity impact.
Can affected versions be identified from this advisory?
No affected or fixed version information is provided. The advisory identifies the affected software as cleanstart/solr.