CLEANSTART-2026-HI70991: StreamReadConstraints

Q: What level of attacker access is required to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.

Q: What is the expected security impact?

The reported impact is limited to availability, with no reported confidentiality or integrity impact. The availability impact is rated high.

Q: How can I determine whether my environment may be exposed?

Review whether your environment uses cleanstart/sonarqube or cleanstart/strimzi-kafka-operator. The provided data does not identify affected or fixed package versions.

Published Nov 12, 2026

Updated

CVE-2026-68498 affects multiple packages. StreamReadConstraints. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/sonarqube<26.10.0.133078-r0

26.10.0.133078-r0

cleanstart/strimzi-kafka-operator<1.3.0-r0

1.3.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/sonarqube to a version that resolves this vulnerability.
Fixed in 26.10.0.133078-r0
Upgrade
Upgrade cleanstart/sonarqube to a version that resolves this vulnerability.
Fixed in 26.10.0.133078-r1
Upgrade
Upgrade cleanstart/strimzi-kafka-operator to a version that resolves this vulnerability.
Fixed in 1.3.0-r0

Event History

Nov 12, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-68498

Frequently Asked Questions

What level of attacker access is required to exploit this issue?