CLEANSTART-2026-QN66429: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Published Nov 7, 2026
·Updated
Security vulnerability affects the spark-sc213-jdk17-py312 package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
Affected Software
1 affected componentFixes available
cleanstart/spark-sc213-jdk17-py312<4.2.0-r9
4.2.0-r9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/spark-sc213-jdk17-py312to a version that resolves this vulnerability.Fixed in 4.2.0-r9
Event History
Nov 7, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Are specific affected or fixed versions identified?
No. The provided advisory data does not list affected versions, fixed versions, or upgrade guidance.
2
Does the available information describe exploitation prerequisites or affected configurations?
No. It does not state what an attacker requires, whether default configurations are affected, or which deployments are exposed.
3
Does the advisory provide indicators for determining whether an environment has already been exploited?
No. No indicators of compromise, detection methods, or logging artifacts are included in the provided data.