Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Legion of the Bouncy Castle BC-LTS-JAVA 2.73.13 Clear all filters
TI-2026-67471 CVE-2026-71883 · GHSA-f5wg-4mfp-h458

Native AES packet cipher returns the raw AES key on an alias

Priority LOW 35

In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authenticated data arrays with JNI's ReleaseByteAr…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00253 Published 2026-10-03 Partial fix · 2.73.13 CWE-200
TI-2026-67475 CVE-2026-71888 · GHSA-j453-27jp-4cph

CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent

Priority MEDIUM 42

In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticated attributes were present.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00112 Published 2026-10-03 Partial fix · 1.86, 2.73.13 +5 CWE-354
TI-2026-67476 CVE-2026-71889 · GHSA-hqqj-v58h-gr7x

PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate

Priority MEDIUM 43

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.509 name constraints t…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00167 Published 2026-10-03 Partial fix · 1.86, 2.73.13 +3 CWE-295
TI-2026-67480 CVE-2026-85515 · GHSA-8hgf-w73g-3x6v

OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check

Priority LOW 35

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00157 Published 2026-10-03 Partial fix · 1.86, 2.73.13 +3 CWE-345
TI-2026-67481 CVE-2026-97873 · GHSA-78x9-mjv2-rr3v

Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

Priority LOW 30

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bou…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00263 Published 2026-10-03 Partial fix · 1.86, 2.73.13 CWE-770