CLEANSTART-2026-KL00129: TypeDeserializerBase
CVE-2026-91776 affects multiple packages. TypeDeserializerBase. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r0 - Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1 - Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 1.3.0-r0
Event History
Frequently Asked Questions
Which deployments should be prioritized for investigation?
Prioritize deployments using either cleanstart/sonarqube or cleanstart/strimzi-kafka-operator, as both are listed as affected software.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates network access, low attack complexity, no privileges required, and no user interaction.
What is the primary security impact?
The supplied severity vector indicates an availability impact of High, with no stated confidentiality or integrity impact.