CLEANSTART-2026-JB35184: In Bouncy Castle for Java before 1
Published Nov 13, 2026
·Updated
CVE-2026-97873 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details.
Affected Software
3 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/rundeck<6.0.1-r11
6.0.1-r11
cleanstart/wso2mi<4.6.0-r9
4.6.0-r9
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/rundeckto a version that resolves this vulnerability.Fixed in 6.0.1-r11 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r9
Event History
Nov 13, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which listed software should be triaged for this issue?
The affected software list identifies cleanstart/wso2am, cleanstart/rundeck, and cleanstart/wso2mi.
2
Is a fixed version provided in the available advisory data?
No specific fixed version is provided. The description is truncated at “before 1,” so the available data does not identify a complete affected or remediated version range.