org.bouncycastle:bcmail-debug-jdk14 (>=1.82, <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.82, <=1.83) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk14 (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

org.bouncycastle:bcmail-jdk14 (>=1.82, <=1.83), org.bouncycastle:bcpg-jdk14 (>=1.82, <=1.83) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk14 (>=1.82, <=1.83)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

org.bouncycastle:bcmail-jdk14 (1.81), org.bouncycastle:bcpg-jdk14 (1.81) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-jdk14 (1.81)

org.bouncycastle:bcprov-jdk14 MAVEN version 1.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk14 and may be impacted: - org.bouncycastle:bcmail-jdk14 1.81 - org.bouncycastle:bcpg-jdk14 1.81 - org.bouncycastle:bcpkix-jdk14...

org.vafer:jdeb (>=0.2, <=0.11) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk12 (130)

org.bouncycastle:bcpg-jdk12 MAVEN version 130 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk12 and may be impacted: - org.vafer:jdeb =0.2, =0.11 Source cves: CVE-2026-3505 Source advisory: OSV:GHSA-CJ8J-37RH-8475...

ai.rev.speechtotext:revai-java-sdk-speechtotext (>=1.0.0, <=1.4.0), ai.rev:revai-java-sdk (>=2.1.0, <=2.5.0) +13 more potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk15 (>=1.45, <=1.46)

org.bouncycastle:bcpg-jdk15 MAVEN version =1.45, =1.0.0, =2.1.0, =1.0.alpha1, =0.0.1, =1.2-2, =1.3-2, =1.2-2, =1.2-2, =0.0.2, =1.0, =1.1 Source cves: CVE-2026-3505 Source advisory: OSV:GHSA-CJ8J-37RH-8475...

io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

CVE-2026-3505

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.81, <=1.83), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.81, <=1.83) +4 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.81, <=1.83)

org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.83 Source cves: CVE-2026-0636 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-16075250...

org.bouncycastle:bcmail-jdk14 (>=1.74, <=1.83), org.bouncycastle:bcpg-jdk14 (>=1.74, <=1.83) +11 more potentially affected by CVE-2026-0636 via org.bouncycastle:bcprov-jdk14 (>=1.74, <=1.83)

org.bouncycastle:bcprov-jdk14 MAVEN version =1.74, =1.74, =1.74, =1.74, =1.74, =1.74, =0.2.5, =1.0.1-rc.1, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-0636 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-16075252...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the AEADEncDataPacket parser in AEADEncDataPacket.java. An attacker can crash packet parsing by supplying an AEAD-encrypted OpenPGP packet with an out-of-range chunk size valu...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the AEADEncDataPacket parser in AEADEncDataPacket.java. An attacker can crash packet parsing by supplying an AEAD-encrypted OpenPGP packet with an out-of-range chunk size valu...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.83) +3 more potentially affected by CVE-2026-5598 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.83)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.83 Source cves: CVE-2026-5598 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-16074607...

io.github.compyoot:utilities-and-generic-tools (0.3.11), org.scala-sbt.ivy:ivy (>=2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e, <=2.3.0-sbt-5681e1a77a149b93a4cfbe4a86d0263d7bd223eb) potentially affected by CVE-2026-3505 via org.bouncycastle:bcpg-jdk14 (1.45)

org.bouncycastle:bcpg-jdk14 MAVEN version 1.45 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcpg-jdk14 and may be impacted: - io.github.compyoot:utilities-and-generic-tools 0.3.11 - org.scala-sbt.ivy:ivy...

CVE-2026-3505 Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...

CVE-2026-3505

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...

CVE-2026-3505

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all pg modules. This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java,...

org.bouncycastle:bcmail-debug-jdk14 (>=1.82, <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.82, <=1.83) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk14 (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: MEND:CVE-2025-14813...

org.bouncycastle:bcjmail-debug-jdk15to18 (>=1.82, <=1.83), org.bouncycastle:bcmail-debug-jdk15to18 (>=1.82, <=1.83) +4 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk15to18 (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk15to18 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: MEND:CVE-2025-14813...

org.bouncycastle:bcjmail-debug-jdk18on (>=1.82, <=1.83), org.bouncycastle:bcmail-debug-jdk18on (>=1.82, <=1.83) +5 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk18on (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk18on MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: MEND:CVE-2025-14813...

org.bouncycastle:bcmail-jdk14 (1.65), org.bouncycastle:bcpg-jdk14 (1.65) +2 more potentially affected by CVE-2020-28052 via org.bouncycastle:bcprov-jdk14 (1.65)

org.bouncycastle:bcprov-jdk14 MAVEN version 1.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bcprov-jdk14 and may be impacted: - org.bouncycastle:bcmail-jdk14 1.65 - org.bouncycastle:bcpg-jdk14 1.65 - org.bouncycastle:bcpkix-jdk14...