CLEANSTART-2026-NN19344: OGNL is an Object Graph Navigation Library for Java
Published Oct 30, 2026
·Updated
Security vulnerability affects the sonarqube package. OGNL is an Object Graph Navigation Library for Java.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.9.0.129388-r0
26.9.0.129388-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.9.0.129388-r0
Event History
Oct 30, 2026
Advisory Published
via OSV·12:35 AM
Data Sourced
via OSV·12:35 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access would an attacker need to attempt exploitation?
The vulnerability is network-reachable and does not require privileges or user interaction. Exploitation has high attack complexity.
2
What is the expected impact if exploitation succeeds?
The reported impact is low for confidentiality, integrity, and availability. The vulnerability does not cross a security authority boundary, as indicated by an unchanged scope.