Search for packages
| purl | pkg:maven/org.bouncycastle/bc-fips@1.0.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-72m5-fvvv-55m6
Aliases: CVE-2020-26939 |
Observable Differences in Behavior to Error Inputs in Bouncy Castle In Legion of the Bouncy Castle BC before 1.55 and … |
Vulnerable |
|
GHSA-6xx3-rg99-gc3p
Aliases: CVE-2020-15522 |
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA … |
Vulnerable |
|
GHSA-67mf-3cr5-8w23
Aliases: CVE-2025-8885 |
Bouncy Castle for Java on All (API modules) allows Excessive Allocation A resource allocation vulnerability exists in Bouncy Castle for … |
Vulnerable |
|
GHSA-68m8-v89j-7j2p
Aliases: CVE-2022-45146 |
Garbage collection issue in BC-FJA in Java 13 and later An issue was discovered in the FIPS Java API of … |
Vulnerable |
|
GHSA-8xfc-gm6g-vgpv
Aliases: CVE-2024-29857 |
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … |
Vulnerable Vulnerable |
|
GHSA-98j2-6v39-78w8
Aliases: CVE-2026-13505 |
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. In Bouncy Castle for Java FIPS (BC-FJA) … |
Not vulnerable |
|
GHSA-qp49-qgx5-5m26
Aliases: CVE-2026-13506 |
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
Not vulnerable |
|
GHSA-9pwp-9qqc-pr26
Aliases: CVE-2026-8763 |
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
Not vulnerable |
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), 2.0.2 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |