BC
Product
Bcpg-fips
5
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Bcpg-fips to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12817 | 8.6 | Aug 3 | OpenPGP AEAD decryption skips final tag on chunk-aligned data Affected: 1.0.7 before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
| CVE-2026-59643 | 7.5 | Aug 3 | OpenPGP inline-signature policy failures silently ignored Affected: before 2.0.13 |
| CVE-2026-59649 | 7.5 | Aug 3 | OpenPGP user-attribute subpacket length bounded only by JVM max memory Affected: before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
| CVE-2026-59640 | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths Affected: before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
| CVE-2026-59648 | 5.3 | Aug 3 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes Affected: 1.0.6 before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
Showing 5