CLEANSTART-2026-QZ18490: JLine is a Java library for handling console input
Security vulnerability affects the sonarqube package. JLine is a Java library for handling console input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Frequently Asked Questions
What level of access does an attacker need?
Exploitation requires local access and low privileges. No user interaction is required.
Is this exposed to unauthenticated remote attackers?
The attack vector is local, so the provided scoring does not indicate remote network exploitation. The attacker must already have local access to the affected environment.
What is the expected impact if exploited?
The reported impact is limited to availability. The provided vector indicates no confidentiality or integrity impact.
Can I determine whether my installation is affected from this advisory?
The available data identifies the affected software as cleanstart/sonarqube but does not provide affected or fixed version ranges, configuration conditions, or detection guidance.