CLEANSTART-2026-VT41393 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-FL87862 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-QX66145 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-IC52490 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-HT00159 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-LZ89821 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-FC85251 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-EJ43845 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-NX17544 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-RY43720 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-LA60535 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-RK76789 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-WQ77811 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-DU85767 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-NR86406 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-JR63274 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-XU20448 In Bouncy Castle for Java before 1

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

CVE-2026-71887

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key Binding cross-certification signature, in the case where that binding omits a Key Flags subpacket. RFC 9580 sec...

CVE-2026-85515

In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed at all. RFC 9580 sec. 13.7 permits an implementation to release the cleartext of the fully authenticated chunks when...

CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...