Search for packages
| purl | pkg:maven/org.bouncycastle/bcpkix-fips@1.0.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-4cx2-fc23-5wg6
Aliases: CVE-2025-8916 |
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-59647
|
CRMF/CMP password-MAC honours unbounded iteration count Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X series), 2.0.12 (2.0.X … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-59639
|
CMS verifySignatures returns true for SignedData with zero signers Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-12802
|
CMS AuthEnvelopedData fails to enforce tag-length on decryption Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X series), … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-59642
|
CMS AuthenticatedData content not bound to MAC when authAttrs present Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 … |
Not vulnerable Not vulnerable Not vulnerable |
|
CVE-2026-15055
|
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 … |
Not vulnerable Not vulnerable Not vulnerable |