Security Bulletin: IBM BigMemory Max is affected by bcprov-jdk18on that could allow attackers to execute a denial of service by exhausting system resources

Summary IBM BigMemory Max utilizes bcprov-jdk18on for TLS/SSL connections, digital signature generation/verification, file/data encryption, secure key storage PKCS12, PKCS8, and supporting modern cryptographic standards. Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Jira Service Management Data Center

This Medium severity Cryptographic Failure vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Service Management Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Jira Software Data Center

This High severity Cryptographic Failure vulnerability was introduced in version 10.3.0 of Jira Software Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/U:Amber allows an...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Crucible Server

This High severity Cryptographic Failure vulnerability was introduced in version 4.9.14 of Crucible Server. This Cryptographic Failure vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber allows an unauthenticated...

Cryptographic Failure org.bouncycastle:bcprov-jdk18on Dependency in Bamboo Data Center

This High severity Cryptographic Failure vulnerability was introduced in versions 10.2.22 and 12.1.10 of Bamboo Data Center. This Cryptographic Failure vulnerability, with a CVSS Score of 7.1 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber allows an...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19485 more potentially affected by CVE-2026-18040 via org.bouncycastle:bcprov-jdk18on (>=1.73, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-18040 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536929...

ai.covia:covia-claude-code (>=0.9.3, <=0.9.8), ai.covia:covia-core (>=0.7.0, <=0.9.8) +3955 more potentially affected by CVE-2026-71891 via org.bouncycastle:bcprov-jdk18on (>=1.85, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.85, =0.9.3, =0.7.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.7.0, =0.9.3, =0.7.0, =0.7.0, =2.6.0-rc-1, =2.6.0-rc-1, =2.6.0-rc-1, =2.6.0-rc-1, =2.7.1 and more Source cves: CVE-2026-71891 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20419452...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the BLS12381BasicScheme.keyValidate path in BLS12381BasicScheme.java. An attacker can be accepted as a signer in BLS aggregate verification by supplying an ECPoint built on a...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +20083 more potentially affected by CVE-2026-97873 via org.bouncycastle:bcprov-jdk18on (>=1.71, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.71, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-97873 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536969...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +19485 more potentially affected by CVE-2026-18036 via org.bouncycastle:bcprov-jdk18on (>=1.73, <=1.85.2)

org.bouncycastle:bcprov-jdk18on MAVEN version =1.73, =0.2.0, =0.9.3, =0.4.0, =0.9.4, =0.9.7, =0.8.0, =0.8.0, =0.9.6, =0.6.0, =0.9.3, =0.4.0, =0.4.0, =0.9.8 and more Source cves: CVE-2026-18036 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20419436...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

ROOT-APP-MAVEN-CVE-2026-0636 CVE-2026-0636 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2026-0636 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-14813 CVE-2025-14813 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched CVE-2025-14813 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-572912 AIKIDO-2026-572912 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched AIKIDO-2026-572912 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-38955 AIKIDO-2026-38955 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched AIKIDO-2026-38955 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-391408 AIKIDO-2026-391408 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched AIKIDO-2026-391408 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-845849 AIKIDO-2026-845849 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched AIKIDO-2026-845849 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-AIKIDO-2026-473893 AIKIDO-2026-473893 in org.bouncycastle:bcprov-jdk18on - Patched by Root

Root has patched AIKIDO-2026-473893 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

PT-2026-109710

Root has patched AIKIDO-2026-38955 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP2)

An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.3.SP2. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...