BC
Product
BC-LTS-JAVA
35
CVEs
0
On KEV
9.1
Max CVSS
6
New 30D
Severity mix
Critical 3High 23Medium 9Low 0
Watch
Add BC-LTS-JAVA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59638 | 6.5 | Aug 3 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in Affected: 2.73.0 before 2.73.12 |
| CVE-2026-97873 | 5.3 | Oct 3 | Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider Affected: 2.73.0 before 2.73.13 |
| CVE-2026-17508 | 5.3 | Oct 2 | Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points Affected: 2.73.0 before 2.73.13; 2.73.0 before 2.73.13 |
| CVE-2026-12860 | 5.3 | Aug 3 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path Affected: 2.73.0 before 2.73.12 |
| CVE-2026-58063 | 5.3 | Aug 3 | BCFKS keystore load honours unbounded KDF cost from untrusted file Affected: 2.73.0 before 2.73.12 |
| CVE-2026-59640 | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths Affected: 2.73.0 before 2.73.12 |
| CVE-2026-59641 | 5.3 | Aug 3 | S/MIME validator trusts signer-asserted signingTime for path validation Affected: 2.73.0 before 2.73.12 |
| CVE-2026-59647 | 5.3 | Aug 3 | CRMF/CMP password-MAC honours unbounded iteration count Affected: 2.73.0 before 2.73.12 |
| CVE-2026-59648 | 5.3 | Aug 3 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes Affected: 2.73.0 before 2.73.12 |
Showing 9