CLEANSTART-2026-QQ18819: In Bouncy Castle for Java before 1
Published Nov 14, 2026
·Updated
Security vulnerability affects the elasticsearch package. In Bouncy Castle for Java before 1.
Affected Software
1 affected componentFixes available
cleanstart/elasticsearch<9.5.5-r5
9.5.5-r5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/elasticsearchto a version that resolves this vulnerability.Fixed in 9.5.5-r5
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The supplied vector indicates network access is sufficient, with low attack complexity. It indicates no privileges, user interaction, or additional attacker prerequisites are required.
2
What is the expected security impact?
The vector indicates a high integrity impact. It does not indicate confidentiality or availability impact.
3
Does the available information identify a version to upgrade to?
No. The affected-version text only says “before 1” and does not provide a complete fixed version or a specific remediation release.