CLEANSTART-2026-ZC59847: In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r1
Event History
Frequently Asked Questions
What access and conditions does exploitation require?
The supplied vector indicates an attacker needs local access and that exploitation has high complexity with an additional attack prerequisite. No privileges or user interaction are required.
What security impact is indicated?
The vector indicates high impact to confidentiality, with no indicated impact to integrity or availability. The recorded severity is medium, with a base score of 5.9.
How can I determine whether my deployment is affected?
The affected software is identified as cleanstart/sonarqube and the vulnerable component is Bouncy Castle for Java. The supplied affected-version text is incomplete ("before 1"), so it does not provide a usable full version boundary for confirming exposure.