Search for packages
| purl | pkg:maven/org.bouncycastle/bc-fips@2.0.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-67mf-3cr5-8w23
Aliases: CVE-2025-8885 |
Bouncy Castle for Java on All (API modules) allows Excessive Allocation A resource allocation vulnerability exists in Bouncy Castle for … |
Vulnerable |
|
GHSA-98j2-6v39-78w8
Aliases: CVE-2026-13505 |
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. In Bouncy Castle for Java FIPS (BC-FJA) … |
Not vulnerable |
|
GHSA-qp49-qgx5-5m26
Aliases: CVE-2026-13506 |
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
Not vulnerable |
|
GHSA-9pwp-9qqc-pr26
Aliases: CVE-2026-8763 |
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
Not vulnerable |
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58062
|
Stapled OCSP response accepted without binding to the checked certificate Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 2.0.2 … |
Not vulnerable Not vulnerable |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58060
|
HSS public-key level count unbounded, enabling huge allocation on verify Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 2.0.2 … |
Not vulnerable Not vulnerable |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), 2.0.2 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |