Vulnerabilities

TI-2026-03020 CVE-2026-3505 · GHSA-cj8j-37rh-8475

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

MEDIUM 45

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00787 Published 2026-04-15 Partial fix · 1.80.2, 1.81.1 +1 CWE-400

TI-2026-04899 CVE-2026-5588 · GHSA-wg6q-6289-32hp

LOW 35

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00777 Published 2026-04-15 Partial fix · 1.80.2, 1.81.1 +4 CWE-327

TI-2026-04906 CVE-2026-5598 · GHSA-p93r-85wp-75v3

MEDIUM 48

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00899 Published 2026-04-15 Partial fix · 1.80.2, 1.81.1 +1 CWE-385

TI-2026-00434 CVE-2026-0636 · GHSA-c3fc-8qff-9hwx

LOW 31

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00527 Published 2026-04-15 Partial fix · 1.80.2, 1.81.1 +1 CWE-90

TI-2025-13517 CVE-2025-14813 · GHSA-574f-3g2m-x479

MEDIUM 42

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.

CVSS 4.0CRITICAL 9.3 Local No auth No interaction EPSS 0.0032 Published 2026-04-15 Partial fix · 1.80.2, 1.81.1 +1 CWE-327