BC
Product
Bctls-fips
by Bouncycastle · last CVE Aug 3, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add Bctls-fips to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14682
7.5
0%
Aug 3
Possible OOM from unbounded up-front allocation on a definite-length read
Affected: before 1.0.24
CVE-2026-59646
7.5
1%
Aug 3
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
Affected: before 1.0.24; 2.0.19 before 2.0.24; 2.1.20 before 2.1.24
CVE-2026-59638
6.5
0%
Aug 3
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
Affected: 1.0.0 before 1.0.24; 2.0.19 before 2.0.24; 2.1.20 before 2.1.24
Showing 3