org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85) potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-debug-jdk14 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk14 MAVEN version =1.81, =1.81, =1.85 Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536903...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536909...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +15 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.1.4, <=2.1.7)

org.bouncycastle:bcutil-fips MAVEN version =2.1.4, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =5.2.0 and more Source cves: CVE-2026-71888https://vulners.com...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.14.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.14.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.4.0, <=9.5.0) +19 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.0.3, <=2.0.7)

org.bouncycastle:bcutil-fips MAVEN version =2.0.3, =3.0.16.0, =9.4.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536971...

cn.gmkit:gmkit (0.10.1), cn.herodotus.engine:facility-tencent-spring-boot-starter (>=3.5.0.0, <=3.5.5.3) +781 more potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-jdk15to18 (>=1.78, <=1.85)

org.bouncycastle:bcpkix-jdk15to18 MAVEN version =1.78, =3.5.0.0, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =2.8.6, =9.2.0.26, =9.3.0.20, =1.0.0-beta0001, =1.0.0-beta0001, =1.0.0-beta0002 and more Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536915...

org.bouncycastle:bcmail-jdk14 (>=1.78, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-jdk14 (>=1.78, <=1.85)

org.bouncycastle:bcpkix-jdk14 MAVEN version =1.78, =1.78, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536914...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) potentially affected by CVE-2026-71892 via org.bouncycastle:bcpkix-debug-jdk15to18 (>=1.81, <=1.85)

org.bouncycastle:bcpkix-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.85 Source cves: CVE-2026-71892 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536912...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.84.0-03, <=3.88.0-08) +109 more potentially affected by CVE-2026-71887 via org.bouncycastle:bcpg-jdk15to18 (>=1.81, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.81, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.92.3-01 and more S...

app.cash.backfila:client-misk-hibernate (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619) +679 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.81, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =4.3.0.549.vf2adaad19b5e, =1.46.0, =0.0.78, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.8 and more Source cves: CVE-2026-71886 Source advisory:...

app.cash.backfila:client-misk-hibernate (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619), app.cash.backfila:service (>=2025.07.28.193750-99c8949, <=2026.10.01.201111-ad9f619) +679 more potentially affected by CVE-2026-71887 via org.bouncycastle:bcpg-jdk18on (>=1.81, <=1.85)

org.bouncycastle:bcpg-jdk18on MAVEN version =1.81, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =2025.07.28.193750-99c8949, =4.3.0.549.vf2adaad19b5e, =1.46.0, =0.0.78, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.8 and more Source cves: CVE-2026-71887 Source advisory:...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.84.0-03, <=3.88.0-08) +109 more potentially affected by CVE-2026-71886 via org.bouncycastle:bcpg-jdk15to18 (>=1.81, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.81, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.84.0-03, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.89.0-09, =3.92.3-01 and more S...

org.bouncycastle:bcmail-jdk14 (>=1.73, <=1.85), org.bouncycastle:bcpg-jdk14 (>=1.73, <=1.85) +11 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk14 (>=1.73, <=1.85.1)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.73, =1.73, =1.73, =1.73, =1.73, =1.73, =0.2.5, =1.0.1-rc.1, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536927...

app.cash.bittycity:outie (0.0.1), app.cash.bittycity:outie-jooq-provider (0.0.1) +1290 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk15to18 (>=1.73, <=1.85.2)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.73, =0.0.2, =0.0.2.1, =0.1.0-m36, =0.1.0-m27, =1.0.1-rc14, =3.5.0.0, =3.5.5.3 - cn.lnkdoc.sdk:awesome-uia-alipay-sdk 3.0.0-rc1 - cn.lnkdoc.sdk:awesome-uia-alipay-sdk-solon-boot-2-starter 3.0.0-rc1 -...

com.github.android-password-store:kage (>=0.6.0, <=0.7.0), io.github.ergoplatform:ergojde_2.12 (1.0) +29 more potentially affected by CVE-2026-71891 via org.bouncycastle:bcprov-jdk15to18 (>=1.85, <=1.85.2)

org.bouncycastle:bcprov-jdk15to18 MAVEN version =1.85, =0.6.0, =1.7.0, =1.85, =1.0.0-rc9, =1.0.0-rc12 and more Source cves: CVE-2026-71891 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20419451...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.85), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.85) +4 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536964...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +20040 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536969...

app.ductape:sdk (0.1.10), cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21) +449 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.12.1)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-97873 Source advisory:...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.jreleaser.jdks:org.jreleaser.jdks.gradle.plugin (>=1.9.0, <=1.10.0) +187 more potentially affected by CVE-2026-85515 via org.bouncycastle:bcpg-jdk15to18 (>=1.74, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.74, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.10.0 and more Source cves: CVE-2026-85515 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536958...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.8), ai.covia:covia-core (>=0.7.0, <=0.9.8) +3916 more potentially affected by CVE-2026-71891 via org.bouncycastle:bcprov-jdk18on (>=1.85, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.85, =0.9.3, =0.7.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.7.0, =0.9.3, =0.7.0, =0.7.0, =2.6.0-rc-1, =2.6.0-rc-1, =2.6.0-rc-1, =2.6.0-rc-1, =2.7.1 and more Source cves: CVE-2026-71891 Source advisory: MEND:CVE-2026-71891...