Vulnerabilities affecting this package (2)
| Advisory |
Summary |
Fixed in package version |
CVE-2026-58062
|
Stapled OCSP response accepted without binding to the checked certificate Affects Bouncy Castle for Java before 1.85. In the stapled …
|
There are no reported fixed by versions.
|
CVE-2026-58060
|
HSS public-key level count unbounded, enabling huge allocation on verify Affects Bouncy Castle for Java before 1.85. HSS/LMS parsing reads …
|
There are no reported fixed by versions.
|
This package is not known to fix any advisories.