Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-cj8j-37rh-8475

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cj8j-37rh-8475

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk12/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk14/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk15/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk15on/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk15to18/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk16/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

gitlab/maven/org.bouncycastle/bcpg-jdk18on/CVE-2026-3505

Bouncy Castle Uncontrolled Resource Consumption vulnerability Allocation of resources without limits or throttling vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules). This issue affects BC-JAVA before 1.84. Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.