Search for packages
| purl | pkg:maven/org.bouncycastle/bc-fips@2.1.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2026-8149
Aliases: GHSA-mx76-r943-rf8g |
Bouncy Castle has a vulnerability in program files gcm128w, gcm512w A vulnerability in Legion of the Bouncy Castle Inc. BC-FJA … | There are no reported fixed by versions. |
|
GHSA-98j2-6v39-78w8
Aliases: CVE-2026-13505 |
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. In Bouncy Castle for Java FIPS (BC-FJA) … |
Not vulnerable |
|
GHSA-qp49-qgx5-5m26
Aliases: CVE-2026-13506 |
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
Not vulnerable |
|
GHSA-v6w3-qrh8-qccc
Aliases: CVE-2026-8798 |
Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound In Bouncy … |
Not vulnerable |
|
GHSA-9pwp-9qqc-pr26
Aliases: CVE-2026-8763 |
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
Not vulnerable |
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58062
|
Stapled OCSP response accepted without binding to the checked certificate Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 2.0.2 … |
Not vulnerable Not vulnerable |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58060
|
HSS public-key level count unbounded, enabling huge allocation on verify Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 2.0.2 … |
Not vulnerable Not vulnerable |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 (1.0.X series), 2.0.2 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java FIPS (BC-FJA) bc-fips before 1.0.2.7 … |
Not vulnerable Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-jv6h-4262-q663
|
Bouncy Castle Vulnerable to Uncontrolled Resource Consumption Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle … |
CVE-2025-12194
|