BC
Product
Bcpg-fips
5
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Bcpg-fips to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12817 | 8.6 | Aug 3 | OpenPGP AEAD decryption skips final tag on chunk-aligned data Affected: 1.0.7 before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
| CVE-2026-59643 | 7.5 | Aug 3 | OpenPGP inline-signature policy failures silently ignored Affected: before 2.0.13 |
| CVE-2026-59649 | 7.5 | Aug 3 | OpenPGP user-attribute subpacket length bounded only by JVM max memory Affected: before 1.0.13; 2.0.8 before 2.0.13; 2.1.10 before 2.1.13 |
Showing 3