Search for packages
| purl | pkg:maven/org.bouncycastle/bcprov-lts8on@2.73.11 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qp49-qgx5-5m26
Aliases: CVE-2026-13506 |
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing … |
Not vulnerable |
|
GHSA-9pwp-9qqc-pr26
Aliases: CVE-2026-8763 |
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name … |
Not vulnerable |
|
CVE-2026-14682
|
Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java LTS before 2.73.12. Definite-length ASN.1 … |
Not vulnerable |
|
CVE-2026-12803
|
KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) Affects Bouncy Castle for Java LTS before … |
Not vulnerable |
|
CVE-2026-12185
|
BKS/UBER keystore allocates from untrusted lengths before integrity check Affects Bouncy Castle for Java LTS before 2.73.12. BcKeyStoreSpi.engineLoad() parses every … |
Not vulnerable |
|
CVE-2026-59650
|
MTI/A0 DH agreement exponentiates unvalidated peer value Affects Bouncy Castle for Java LTS before 2.73.12. DHAgreement, implementing the MTI/A0 two-pass … |
Not vulnerable |
|
CVE-2026-58062
|
Stapled OCSP response accepted without binding to the checked certificate Affects Bouncy Castle for Java LTS before 2.73.12. In the … |
Not vulnerable |
|
CVE-2026-58061
|
CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java LTS before 2.73.12. CCMBlockCipher.processPacket(), and … |
Not vulnerable |
|
CVE-2026-59651
|
BKS keystore accepts legacy version with 16-bit integrity MAC key Affects Bouncy Castle for Java LTS before 2.73.12. BcKeyStoreSpi.engineLoad() accepts … |
Not vulnerable |
|
CVE-2026-13586
|
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java LTS before 2.73.12. PKCS12KeyStoreSpi and PKCS12PBMAC1KeyStoreSpi derived … |
Not vulnerable |
|
CVE-2026-58060
|
HSS public-key level count unbounded, enabling huge allocation on verify Affects Bouncy Castle for Java LTS before 2.73.12. HSS/LMS parsing … |
Not vulnerable |
|
CVE-2026-12816
|
IESEngine stream-mode MAC forgery via length-dependent KDF split Affects Bouncy Castle for Java LTS before 2.73.12. When IESEngine is initialised … |
Not vulnerable |
|
CVE-2026-12860
|
RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path Affects Bouncy Castle for Java LTS before 2.73.12. RSADigestSigner.verifySignature() … |
Not vulnerable |
|
CVE-2026-58059
|
Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java LTS before 2.73.12. IETFUtils.valueToString() escapes special characters by … |
Not vulnerable |
|
CVE-2026-58063
|
BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java LTS before 2.73.12. BcFKSKeyStoreSpi.engineLoad() takes … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-mx76-r943-rf8g
|
Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption In Bouncy Castle LTS for Java, the AES/GCM … |
CVE-2026-8149
|