3 matches found
OPENSUSE-SU-2026:21538-1 Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...
9.3CVSS5.9AI score0.00386EPSS
SaveExploits0References64
CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...
8.7CVSS5.4AI score0.00277EPSS
SaveExploits0References2
20