CLEANSTART-2026-KY01791: In Bouncy Castle for Java before 1
Published Nov 13, 2026
·Updated
CVE-2026-85515 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/rundeck<6.0.1-r11
6.0.1-r11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/rundeckto a version that resolves this vulnerability.Fixed in 6.0.1-r11
Event History
Nov 13, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments should be investigated first?
The advisory lists cleanstart/wso2am and cleanstart/rundeck. Prioritize deployments of those packages that include Bouncy Castle for Java.
2
How can I determine whether a deployment is affected?
Identify the Bouncy Castle for Java version and package present in the deployment, then consult the referenced individual vulnerability details. The available data does not provide a complete package-to-version mapping.