Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcpkix-fips@2.1.12
purl pkg:maven/org.bouncycastle/bcpkix-fips@2.1.12
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
CVE-2026-59647
CRMF/CMP password-MAC honours unbounded iteration count Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X series), 2.0.12 (2.0.X …
CVE-2026-59639
CMS verifySignatures returns true for SignedData with zero signers Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X …
CVE-2026-12802
CMS AuthEnvelopedData fails to enforce tag-length on decryption Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 (1.0.X series), …
CVE-2026-59642
CMS AuthenticatedData content not bound to MAC when authAttrs present Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 …
CVE-2026-15055
PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input Affects Bouncy Castle for Java FIPS (BC-FJA) bcpkix-fips before 1.0.12 …