org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536963...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the PBEPBKDF2 implementation in prov/src/main/java/org/bouncycastle/jcajce/provider/symmetric/PBEPBKDF2.java. An attacker can force excessive CPU work by supplying a...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-18040 Source advisory: MEND:CVE-2026-18040...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-71889 Source advisory: MEND:CVE-2026-71889...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-18036 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-18036 Source advisory: MEND:CVE-2026-18036...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.85), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.85) +3 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.85.1)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.85.1 Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-58059 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-58059 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518048...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-12816 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519168...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-12860 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518023...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-58061 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-58061 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519132...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-58063 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-58063 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519076...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-12803 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-12803 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18519153...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-14682 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-14682 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518096...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the force method of LazyEncodedSequence, which parses the deferred SEQUENCE with a fresh ASN1InputStream whose nesting-depth counter is reset rather than inherited from the parent parse, and never calls...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the BcKeyStoreSpi.engineLoad method, which sizes buffers for the certificate chain array, encoded certificates, encoded key material, entry data, and PBE salts directly from readInt length...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-59651 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-59651 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512578...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-8763 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-8763 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512785...

org.bouncycastle:bcmail-debug-jdk14 (>=1.81, <=1.84), org.bouncycastle:bcpg-debug-jdk14 (>=1.81, <=1.84) +3 more potentially affected by CVE-2026-59650 via org.bouncycastle:bcprov-debug-jdk14 (>=1.81, <=1.84)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.81, =1.81, =1.81, =1.81, =1.81, =1.81, =1.84 Source cves: CVE-2026-59650 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512816...

org.bouncycastle:bcmail-debug-jdk14 (>=1.82, <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.82, <=1.83) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk14 (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: OSV:GHSA-574F-3G2M-X479...

org.bouncycastle:bcmail-debug-jdk14 (>=1.82, <=1.83), org.bouncycastle:bcpg-debug-jdk14 (>=1.82, <=1.83) +3 more potentially affected by CVE-2025-14813 via org.bouncycastle:bcprov-debug-jdk14 (>=1.82, <=1.83)

org.bouncycastle:bcprov-debug-jdk14 MAVEN version =1.82, =1.82, =1.82, =1.82, =1.82, =1.82, =1.83 Source cves: CVE-2025-14813 Source advisory: GHSA-574F-3G2M-X479...