CLEANSTART-2026-XC37199: In Bouncy Castle for Java before 1
Published Nov 5, 2026
·Updated
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1.
Affected Software
1 affected componentFixes available
cleanstart/keycloak<26.8.1-r1
26.8.1-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/keycloakto a version that resolves this vulnerability.Fixed in 26.8.1-r1
Event History
Nov 5, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
The supplied vector indicates network reachability, low attack complexity, no required privileges, and no user interaction.
2
What impact is indicated if exploitation succeeds?
The vector indicates high impact to integrity. It indicates no impact to confidentiality or availability.
3
Which deployments should be investigated?
Investigate deployments of the cleanstart/keycloak package that include Bouncy Castle for Java. The supplied data does not identify an exact affected or fixed version.