Search for packages
| purl | pkg:maven/org.bouncycastle/bc-fips@1.0.2.7 |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-98j2-6v39-78w8
|
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. In Bouncy Castle for Java FIPS (BC-FJA) … |
CVE-2026-13505
|
|
GHSA-qp49-qgx5-5m26
|
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
CVE-2026-13506
|
|
GHSA-9pwp-9qqc-pr26
|
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
CVE-2026-8763
|
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … | |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … | |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), … | |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), 2.0.2 … | |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |