bouncycastle

7 results · Clear filters · Feed

• Critical 9.2
  CVE-2026-71885

  MLS X.509 credential not bound to the LeafNode signature key

  In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's signature_key. LeafNode.verify() checked a leaf's signature against the signature_key carried in the leaf itsel…

  Legion of the Bouncy Castle BC-JAVA bouncycastle bouncycastle Debian Ubuntu
  Oct 3, 2026
• Critical 9.3
  CVE-2026-58062 Public exploit

  Stapled OCSP response accepted without binding to the checked certificate

  In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) a…

  Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu Wolfi
  Aug 3, 2026
• Critical 9.3
  CVE-2026-59638

  JSSE hostname verifier CN-fallback enabled by default despite documented opt-in

  In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X…

  Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  Aug 3, 2026
• Critical 9.3
  CVE-2026-59650

  MTI/A0 DH agreement exponentiates unvalidated peer value

  In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.

  Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA keycloak-26.6-iamguarded-compat Debian Ubuntu Wolfi
  Aug 3, 2026
• Critical 9.3
  CVE-2026-8763

  Name Constraints bypass via trailing dot in rfc822Name and URI

  In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.…

  Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu Wolfi Maven
  Aug 3, 2026
• Critical 9.3
  CVE-2025-14813

  GOSTCTR implementation unable to process more than 255 blocks correctly

  : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.…

  Legion of the Bouncy Castle BC-JAVA logstash-9.3 logstash-9.3-iamguarded-compat Ubuntu Wolfi Maven
  Apr 15, 2026
• Critical 9.8
  CVE-2018-1000613

  Deserialization of Untrusted Data in Bouncy castle

  Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key d…

  bouncycastle bouncycastle org.bouncycastle:bcprov-jdk15on Debian Ubuntu Maven
  Jul 9, 2018