bouncycastle / bcpg-fips
5 known vulnerabilities in bouncycastle bcpg-fips.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-59649 | Medium | 0.3% | 7.5 | In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length b… | |
| CVE-2026-59643 | Medium | 0.2% | 7.5 | In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures … | |
| CVE-2026-12817 | Medium | 0.1% | 8.6 | In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag o… | |
| CVE-2026-59648 | Low | 0.3% | 5.3 | In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chose… | |
| CVE-2026-59640 | Low | 0.2% | 5.3 | In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on … |