bouncycastle / fips_java_api
9 known vulnerabilities in bouncycastle fips_java_api.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-58060 | Medium | 0.7% | 7.5 | In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, ena… | |
| CVE-2026-58059 | Medium | 0.5% | 7.5 | In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying… | |
| CVE-2026-8763 | Medium | 0.4% | 9.1 | In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot … | |
| CVE-2026-13586 | Medium | 0.4% | 7.5 | In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iterat… | |
| CVE-2026-58062 | Medium | 0.3% | 9.1 | In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without bi… | |
| CVE-2026-13506 | Medium | 0.3% | 7.5 | In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nestin… | |
| CVE-2026-14682 | Medium | 0.3% | 7.5 | In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allo… | |
| CVE-2026-58061 | Medium | 0.3% | 7.5 | In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to calle… | |
| CVE-2026-58063 | Low | 0.4% | 5.3 | In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF… |