CLEANSTART-2026-ZQ04770: In Bouncy Castle for Java before 1
Published Nov 6, 2026
·Updated
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1.
Affected Software
1 affected componentFixes available
cleanstart/keycloak<26.7.5-r3
26.7.5-r3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/keycloakto a version that resolves this vulnerability.Fixed in 26.7.5-r3
Event History
Nov 6, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
The vector indicates local access is required. The attacker does not need privileges or user interaction, but exploitation has additional attack requirements.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high on confidentiality. No impact on integrity, availability, or subsequent systems is indicated by the provided vector.