ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30622 more potentially affected by CVE-2026-12185 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2026-12185 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512523...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21490 more potentially affected by CVE-2026-59642 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59642 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512973...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +10857 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59647 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513013...

com.ascentstream.pulsar:bcfips-include-test (>=2.10.6.9, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=2.10.6.9, <=3.0.14.1) +20 more potentially affected by CVE-2026-59642 via org.bouncycastle:bcpkix-fips (>=1.0.1, <=1.0.8)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.1, =2.10.6.9, =2.10.6.9, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =1.0.0, =1.0.0, =3.0.0-rc1, =3.0.0-rc6, =1.0.0, =1.0.1 - io.skuber:skuber-examples2.12 2.6.3 - io.skuber:skuber-examples2.13 2.6.3 and more Source cves: CVE-2026-59642 Source advisor...

ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +21490 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcpkix-jdk15on MAVEN version =1.47, =1.0.1, =0.2.3, =4.4.0.0, =0.1.12, =0.1.2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.24 and more Source cves: CVE-2026-59647 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513012...

amdonov.ospackage-init:amdonov.ospackage-init.gradle.plugin (>=0.1.0, <=0.5.0), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1655 more potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcpg-jdk15on MAVEN version =1.46, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =2023.06.07.114626-93b9d6f, =0.1.3-20210127.1838-76ab4fc, =0.1.4-20220614.0152-5ae0eef, =1.0.0-m11, =1.0.0-m6, =1.0.0-m11, =0.0.1-m20, =0.0.1-m20, =0.0.1-m27, =1.0.0-m11,...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), io.github.hworblehat:nexus3-external-auth-plugin (0.1.0) +220 more potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-jdk15to18 (>=1.65, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.65, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-beta3, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.10.0 and more Source cves: CVE-2026-59640 Source advisory:...

io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

ai.covia:covia-core (>=0.4.0, <=0.6.0), ai.covia:covia-sql (0.6.0) +11386 more potentially affected by CVE-2026-59645 via org.bouncycastle:bcutil-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bcutil-jdk18on MAVEN version =1.71, =0.4.0, =0.4.0, =0.4.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =3.10.3.6 and more Source cves: CVE-2026-59645 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512330...

cn.ponfee:commons-core (1.0), com.alipay.chainstack:chainstack-mychain-drc (2.0.1-rc) +120 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-jdk15on (>=1.57, <=1.70)

org.bouncycastle:bctls-jdk15on MAVEN version =1.57, =2.0.0-rc, =2.0.0-rc, =2.0.0-rc, =0.10.2.24.5, =1.0, =1.0, =2.0, =2.12, =4.1 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512882...

com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)

org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512890...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +45 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=2.1.20, <=2.1.23)

org.bouncycastle:bctls-fips MAVEN version =2.1.20, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =26.4.0, =16.0.1, =16.0.1, =16.0.1, =16.0.1, =16.1.3 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGB...

cn.ponfee:commons-core (>=1.1, <=1.4), com.easygoingapi:yoja-core (>=1.0.0, <=1.2.1) +116 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-jdk18on (>=1.71, <=1.84)

org.bouncycastle:bctls-jdk18on MAVEN version =1.71, =1.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =9.1.5, =16.0.0-rc1, =10.5.1, =10.3.1, =2.2.3, =2.6.0, =2.6.0, =2.2.3, =2.2.3, =4.1.9 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512884...

io.cloudslang.content:cs-mail (0.0.67) potentially affected by CVE-2026-59641 via org.bouncycastle:bcjmail-fips (2.0.5)

org.bouncycastle:bcjmail-fips MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcjmail-fips and may be impacted: - io.cloudslang.content:cs-mail 0.0.67 Source cves: CVE-2026-59641 Source advisory:...

com.artipie:debian-adapter (>=v0.30.15, <=v1.17.13), org.demoiselle.signer:chain-icp-brasil (4.6.0) +13 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcmail-lts8on (>=2.73.5, <=2.73.11)

org.bouncycastle:bcmail-lts8on MAVEN version =2.73.5, =v0.30.15, =v1.17.13 - org.demoiselle.signer:chain-icp-brasil 4.6.0 - org.demoiselle.signer:chain-icp-brasil-homolog 4.6.0 - org.demoiselle.signer:chain-iti 4.6.0 - org.demoiselle.signer:chain-iti-homolog 4.6.0 -...

org.jboss.resteasy:resteasy-crypto (>=6.0.0.beta1, <=6.1.0.beta1), org.jboss.resteasy:resteasy-integration-tests (>=6.0.0.beta1, <=6.1.0.beta1) +3 more potentially affected by CVE-2026-59641 via org.bouncycastle:bcjmail-jdk15on (>=1.69, <=1.70)

org.bouncycastle:bcjmail-jdk15on MAVEN version =1.69, =6.0.0.beta1, =6.0.0.beta1, =6.0.0.beta1, =6.1.0.beta1 - org.wildfly:wildfly-preview-build 24.0.1.final - org.wildfly:wildfly-preview-dist 24.0.1.final Source cves: CVE-2026-59641 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512873...

io.github.epi155:promethium-pgp-jdk5 (0.5-b1), org.igniterealtime.smack:smack-android (>=4.5.0-alpha2, <=4.5.0-beta2) +199 more potentially affected by CVE-2026-59648 via org.bouncycastle:bcpg-jdk15to18 (>=1.71, <=1.84)

org.bouncycastle:bcpg-jdk15to18 MAVEN version =1.71, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-beta3, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =4.5.0-alpha2, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.9.0, =1.10.0 and more Source cves: CVE-2026-59648 Source advisory:...

amdonov.ospackage-init:amdonov.ospackage-init.gradle.plugin (>=0.1.0, <=0.5.0), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1655 more potentially affected by CVE-2026-59649 via org.bouncycastle:bcpg-jdk15on (>=1.46, <=1.70)

org.bouncycastle:bcpg-jdk15on MAVEN version =1.46, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =2023.06.07.114626-93b9d6f, =0.1.3-20210127.1838-76ab4fc, =0.1.4-20220614.0152-5ae0eef, =1.0.0-m11, =1.0.0-m6, =1.0.0-m11, =0.0.1-m20, =0.0.1-m20, =0.0.1-m27, =1.0.0-m11,...

org.opensearch:opensearch-plugin-cli (>=2.17.0, <=3.2.0) potentially affected by CVE-2026-59649 via org.bouncycastle:bcpg-fips (>=2.0.9, <=2.0.11)

org.bouncycastle:bcpg-fips MAVEN version =2.0.9, =2.17.0, =3.2.0 Source cves: CVE-2026-59649 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512843...

org.opensearch:opensearch-plugin-cli (>=3.3.0, <=3.8.0), org.sonatype.nexus.api.extdirect:nexus-api-extdirect-common (>=3.81.0-08, <=3.88.0-08) +110 more potentially affected by CVE-2026-59649 via org.bouncycastle:bcpg-fips (2.1.11)

org.bouncycastle:bcpg-fips MAVEN version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-fips and may be impacted: - org.opensearch:opensearch-plugin-cli =3.3.0, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.81.0-08, =3.89.0-09,...