Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the readBlock method of PGPAeadInputStream BcAEADUtil, mirrored in JceAEADUtil, which pre-reads the final 16 bytes but ignores the result and returns EOF without calling doFinal when the...

com.artipie:debian-adapter (>=v0.30.15, <=v1.17.13), com.artipie:rpm-adapter (>=v0.30.15, <=v1.17.13) +2 more potentially affected by CVE-2026-59640 via org.bouncycastle:bcpg-lts8on (>=2.73.2, <=2.73.6)

org.bouncycastle:bcpg-lts8on MAVEN version =2.73.2, =v0.30.15, =v0.30.15, =2.1.9, =2.1.10 Source cves: CVE-2026-59640 Source advisory: MEND:CVE-2026-59640...

DoS (Denial of Service) org.bouncycastle:bcpg-lts8on Dependency in Bitbucket Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Bitbucket Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...