Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Apache Hive could expose data through Jackson library
published 28 days ago
Summary
The Apache Hive package uses the FasterXML Jackson-databind library, which has a security flaw that could let an attacker read or alter data processed by Hive. This risk matters because Hive often handles sensitive business information. Apply the latest Hive updates or patch the Jackson library to a safe version as soon as possible.
What to do
- Update cleanstart apache-hive to version 3.1.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-hive |
< 3.1.3-r0 Fix: upgrade to 3.1.3-r0
|
Original advisory text
FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published8 Oct 2026
Updated8 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-IN66246 · OSV
Track software like this
Free during beta