CLEANSTART-2026-PB41600: Medium severity cleanstart/elasticsearch vulnerability
Published Nov 14, 2026
Security vulnerability affects the elasticsearch package. In Bouncy Castle for Java before 1.
Affected Software
1 affected componentFixes available
cleanstart/elasticsearch<9.5.5-r5
9.5.5-r5
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
The vector indicates network reachability and no privileges required, but it also indicates user interaction is required.
2
What security impact is indicated?
The available metrics indicate low impact to availability. They do not indicate impact to confidentiality or integrity.
3
Can I determine the affected and fixed package versions from this advisory?
No. The provided description only states that Bouncy Castle for Java is affected before an incomplete version value, so the exact affected and remediated versions are not available here.