TI-2026-11509 CVE-2026-13586 · GHSA-pxw2-f34f-xjvr
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
Priority LOW 25
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS).
Vulnerabilities
7 records
TI-2026-11431 CVE-2026-13506 · GHSA-qp49-qgx5-5m26
Lazy ASN.1 sequence forcing resets nesting-depth guard
Priority MEDIUM 44
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard.
TI-2026-12374 CVE-2026-14682 · GHSA-4hc3-69f9-4wfx
Possible OOM from unbounded up-front allocation on a definite-length read
Priority MEDIUM 44
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read.
TI-2026-41813 CVE-2026-58059 · GHSA-4mwx-9cgq-h2wp
Quadratic-time escaping when stringifying X.500 distinguished names
Priority MEDIUM 44
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names.
TI-2026-41815 CVE-2026-58061 · GHSA-cwc6-73j8-3qm6
CCM-family modes write plaintext to caller buffer before tag check
Priority MEDIUM 43
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check.
TI-2026-41817 CVE-2026-58063 · GHSA-jmxg-924w-f7mv
BCFKS keystore load honours unbounded KDF cost from untrusted file
Priority LOW 24
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file.
TI-2026-07701 CVE-2026-8763 · GHSA-9pwp-9qqc-pr26
Name Constraints bypass via trailing dot in rfc822Name and URI
Priority MEDIUM 48
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI.