BC
Product
Bouncy Castle For Java Lts
28
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 7Low 0
Watch
Add Bouncy Castle For Java Lts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59638 | 6.5 | Aug 3 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in Affected: through 2.73.11 |
| CVE-2026-12860 | 5.3 | Aug 3 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path Affected: through 2.73.11 |
| CVE-2026-58063 | 5.3 | Aug 3 | BCFKS keystore load honours unbounded KDF cost from untrusted file Affected: through 2.73.11 |
| CVE-2026-59640 | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths Affected: through 2.73.11 |
| CVE-2026-59641 | 5.3 | Aug 3 | S/MIME validator trusts signer-asserted signingTime for path validation Affected: through 2.73.11 |
| CVE-2026-59647 | 5.3 | Aug 3 | CRMF/CMP password-MAC honours unbounded iteration count Affected: through 2.73.11 |
| CVE-2026-59648 | 5.3 | Aug 3 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes Affected: through 2.73.11 |
Showing 7