CLEANSTART-2026-JO57695: In Jakarta Mail versions prior to 2
Published Nov 12, 2026
·Updated
Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.10.0.133078-r1
26.10.0.133078-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The supplied vector indicates that it is remotely reachable, requires low attack complexity, and does not require privileges or user interaction.
2
What is the potential impact if exploitation succeeds?
The supplied vector indicates an integrity impact, with no confidentiality or availability impact listed.
3
Which deployments should be prioritized for investigation?
Prioritize cleanstart/sonarqube deployments that include Jakarta Mail versions prior to 2, particularly instances exposed to network-accessible attackers.