BC
Product
Bc-java
by Bouncycastle · last CVE Oct 2, 2026
53
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 4High 30Medium 16Low 1
Watch

Add Bc-java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000613
9.8
5%
Jul 9
Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select…
Affected: 1.58 before 1.60
CVE-2026-58062
9.1
0%
Aug 3
Stapled OCSP response accepted without binding to the checked certificate
Affected: 1.66 before 1.85
CVE-2026-59650
9.1
0%
Aug 3
MTI/A0 DH agreement exponentiates unvalidated peer value
Affected: before 1.85
CVE-2026-8763
9.1
0%
Aug 3
Name Constraints bypass via trailing dot in rfc822Name and URI
Affected: before 1.85
Showing 4