Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
spark-sc212-jdk17-py311 and sonarqube risk remote code execution
published 1 month ago
Summary
Both the spark-sc212-jdk17-py311 and SonarQube images include an older version of the Jackson core library that can be exploited to run unauthorized code on the server. The problem is fixed in the latest Jackson core release, so updating the packages to the newest version eliminates the risk. Apply the vendor‑provided updates as soon as possible and verify that the new version is in use.
What to do
- Update cleanstart spark-sc212-jdk17-py311 to version 3.4.4-r1.
- Update cleanstart sonarqube to version 26.7.0.124771-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | spark-sc212-jdk17-py311 |
< 3.4.4-r1 Fix: upgrade to 3.4.4-r1
|
| CleanStart | cleanstart | sonarqube |
< 26.7.0.124771-r4 Fix: upgrade to 26.7.0.124771-r4
|
Original advisory text
fix released in jackson-core 2
CVE-2026-68494 affects multiple packages. The fix released in jackson-core 2. See references for individual vulnerability details.
Timeline
Published29 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
CLEANSTART-2026-WP06328 · OSV
Track software like this
Free during beta