CLEANSTART-2026-MR63134: pgjdbc, the PostgreSQL JDBC Driver, versions 42
Published Nov 12, 2026
·Updated
Security vulnerability affects the sonarqube package. pgjdbc, the PostgreSQL JDBC Driver, versions 42.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.10.0.133078-r1
26.10.0.133078-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The CVSS vector indicates network access is required, but no prior privileges or user interaction are needed. Exploitation has high attack complexity.
2
What is the likely security impact if exploitation succeeds?
The supplied CVSS metrics indicate high confidentiality impact. They indicate no integrity or availability impact.
3
How can I determine whether my deployment is affected?
Check whether the cleanstart/sonarqube package includes pgjdbc version 42. The provided data does not include an exact affected version range or a fixed version, so it cannot establish exposure more precisely.