CLEANSTART-2026-SG27211: fix released in jackson-core 2

Q: Which component should be updated to address this issue?

The available information identifies jackson-core 2 as the component containing the fix. The affected software is cleanstart/sonarqube.

Q: What impact is indicated by the supplied severity data?

The supplied vector indicates a network-accessible issue with low attack complexity, no required privileges, and no user interaction. The indicated impact is limited to availability; confidentiality and integrity impacts are marked as none.

Published Nov 12, 2026

Updated

Security vulnerability affects the sonarqube package. The fix released in jackson-core 2.

Affected Software

1 affected componentFixes available

cleanstart/sonarqube<26.10.0.133078-r0

26.10.0.133078-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/sonarqube to a version that resolves this vulnerability.
Fixed in 26.10.0.133078-r0
Upgrade
Upgrade cleanstart/sonarqube to a version that resolves this vulnerability.
Fixed in 26.10.0.133078-r1
Upgrade
Upgrade jackson-core to a version that resolves this vulnerability.
Fixed in 2

Event History

Nov 12, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-68494

Frequently Asked Questions

Which component should be updated to address this issue?

The available information identifies jackson-core 2 as the component containing the fix. The affected software is cleanstart/sonarqube.

What impact is indicated by the supplied severity data?

The supplied vector indicates a network-accessible issue with low attack complexity, no required privileges, and no user interaction. The indicated impact is limited to availability; confidentiality and integrity impacts are marked as none.

CLEANSTART-2026-SG27211: fix released in jackson-core 2

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which component should be updated to address this issue?

What impact is indicated by the supplied severity data?

Company

Resources

Contact

Frequently Asked Questions

Which component should be updated to address this issue?

What impact is indicated by the supplied severity data?