CLEANSTART-2026-MW12558: In Bouncy Castle for Java before 1
Published Nov 12, 2026
·Updated
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1.
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.10.0.133078-r1
26.10.0.133078-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The scoring data indicates the attack can be performed over the network with low attack complexity and no prior privileges. User interaction is required.
2
What is the expected security impact?
The scoring data indicates a low availability impact. It does not indicate confidentiality or integrity impact.