Search for packages
| purl | pkg:maven/org.bouncycastle/bc-fips@1.0.2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-67mf-3cr5-8w23
Aliases: CVE-2025-8885 |
Bouncy Castle for Java on All (API modules) allows Excessive Allocation A resource allocation vulnerability exists in Bouncy Castle for … |
Vulnerable |
|
GHSA-8xfc-gm6g-vgpv
Aliases: CVE-2024-29857 |
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … |
Vulnerable Vulnerable |
|
GHSA-98j2-6v39-78w8
Aliases: CVE-2026-13505 |
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. In Bouncy Castle for Java FIPS (BC-FJA) … |
Not vulnerable |
|
GHSA-qp49-qgx5-5m26
Aliases: CVE-2026-13506 |
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
Not vulnerable |
|
GHSA-9pwp-9qqc-pr26
Aliases: CVE-2026-8763 |
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
Not vulnerable |
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), 2.0.2 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-68m8-v89j-7j2p
|
Garbage collection issue in BC-FJA in Java 13 and later An issue was discovered in the FIPS Java API of … |
CVE-2022-45146
|