CLEANSTART-2026-OE26010 In Bouncy Castle for Java before 1

CVE-2026-14682 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-NV23074 In Bouncy Castle for Java before 1

CVE-2026-58062 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-SJ44900 In Bouncy Castle for Java before 1

CVE-2026-59650 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-IS00245 In Bouncy Castle for Java before 1

CVE-2026-15055 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-WC45215 In Bouncy Castle for Java before 1

CVE-2026-8763 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-YW27617 In Bouncy Castle for Java before 1

CVE-2026-12817 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-PP95787 In Bouncy Castle for Java before 1

CVE-2026-13586 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-FG50874 In Bouncy Castle for Java before 1

CVE-2026-13506 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-RL38047 In Bouncy Castle for Java before 1

Security vulnerability affects the spark-sc213-jdk17-py312 package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-HW07490 In Bouncy Castle for Java before 1

Security vulnerability affects the spark-sc213-jdk17-py312 package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-AY62186 In Bouncy Castle for Java before 1

CVE-2026-59639 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-XP43245 In Bouncy Castle for Java before 1

CVE-2026-59651 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-UZ09696 In Bouncy Castle for Java before 1

CVE-2026-12802 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

Security Bulletin:Bouncy Castle Java OER Parser Recursion Issue on IEEE 1609.2 Schema

Summary In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...

bouncy-castle-generative-test-poc

Generative testing bouncy castle vulnerability CVE-2020-28052 Running the tests Test the vulnerable versions defaults to 1.66 $ clojure -M:test $ clojure -M:test:v1.65 Test the versions before the vuln and after the patch 1.67 $ clojure -M:test:v1.64 $ clojure -M:test:patched Links...

Security Bulletin: Bouncy Castle(bcprov and bcpg) security vulnerability in IBM FileNet Content Manager(FNCM) reported for FileNet Deployment Manager(FDM)

Summary IBM FileNet Content ManagerFNCM 5.7.0-IF6 addresses multiple Bouncy Castle CVEs reported for FileNet Deployment ManagerFDM Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This iss...

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The GOSTCTR implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the G3413CTRBlockCiphe...

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...

bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...

bouncycastle: BC-JAVA: GOSTCTR implementation unable to process more than 255 blocks correctly

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcprov. The GOSTCTR implementation is unable to securely process more than 255 blocks of data due to keystream reuse. This issue allows an attacker to break the fundamental confidentiality of any data protected by the G3413CTRBlockCiphe...