CLEANSTART-2026-HS93465: jackson-databind's deserializer for java

Q: Which software should be investigated for exposure?

The advisory identifies cleanstart/gradle as the affected software.

Q: What identifier can be used to correlate this issue with other vulnerability records?

The issue is associated with CVE-2026-19032.

Q: When was this advisory published and last modified?

It was published on 2026-11-08 and was last modified on 2026-11-08.

Published Nov 8, 2026

Updated

Security vulnerability affects the gradle package. jackson-databind's deserializer for java.

Affected Software

1 affected componentFixes available

cleanstart/gradle<9.8.2-r0

9.8.2-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/gradle to a version that resolves this vulnerability.
Fixed in 9.8.2-r0

Event History

Nov 8, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-19032

Frequently Asked Questions

Which software should be investigated for exposure?

The advisory identifies cleanstart/gradle as the affected software.

What identifier can be used to correlate this issue with other vulnerability records?

The issue is associated with CVE-2026-19032.

When was this advisory published and last modified?

It was published on 2026-11-08 and was last modified on 2026-11-08.

CLEANSTART-2026-HS93465: jackson-databind's deserializer for java

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which software should be investigated for exposure?

What identifier can be used to correlate this issue with other vulnerability records?

When was this advisory published and last modified?

Company

Resources

Contact

Frequently Asked Questions

Which software should be investigated for exposure?

What identifier can be used to correlate this issue with other vulnerability records?

When was this advisory published and last modified?