CLEANSTART-2026-UL49545: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)
Published Nov 12, 2026
·Updated
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
Affected Software
1 affected componentFixes available
cleanstart/sonarqube<26.10.0.133078-r1
26.10.0.133078-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Nov 12, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
The CVSS vector indicates network access and low privileges are required. No user interaction is required.
2
What is the expected security impact?
The reported impact is high availability impact, consistent with denial of service through excessive resource allocation. The CVSS vector reports no confidentiality or integrity impact.