7714 matches found
CVE-2026-8798 Native entropy source retries the CPU entropy instructions without limit
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
CVE-2026-8798
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
CVE-2026-8798
CVE-2026-8798 affects Bouncy Castle for Java FIPS (BC-FJA) prior to bc-fips 2.1.3. The native entropy source on Intel platforms looped unbounded when RDSEED/RDRAND failed, risking a thread hang and potential denial of service as any operation using the native entropy source could stall. The fixes...
PT-2026-69160
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java FIPS BC-FJA versions prior to 2.1.3 Description On Intel platforms, the native entropy source retries CPU entropy instructions without a bound. The JNI seeding routine continuously re-issues instructions as long as the...
CVE-2026-13505: Missing Release of Resource after Effective Lifetime
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...
CVE-2026-8798: Loop with Unreachable Exit Condition
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
PT-2026-69161
Name of the Vulnerable Software and Affected Versions Bouncy Castle for Java FIPS BC-FJA versions prior to 1.0.2.7 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.0.2 Bouncy Castle for Java FIPS BC-FJA versions prior to 2.1.3 Description Sensitive key material within the AES and DESede...
CVE-2026-71554 vulnerabilities
Vulnerabilities for packages: airflow, localstack, jupyter-all-spark-notebook, authentik-fips, mitmproxy, apache-beam-python-3.14-sdk, open-webui, prefect-fips, authentik...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: airflow, localstack, jupyter-all-spark-notebook, authentik-fips, mitmproxy, apache-beam-python-3.14-sdk, open-webui, prefect-fips, authentik...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: keycloak-fips, apicurio-registry, infinispan, nacos-docker, keycloak, dependency-track, airbyte-server-fips, camunda-zeebe, nacos, zipkin, dependency-track-apiserver, airbyte-server, request-9047-keycloak-fips, apache-nifi, apicurio-registry-fips...
CVE-2026-40984 vulnerabilities
Vulnerabilities for packages: keycloak, dependency-track, hono, knative-kafka-broker, nacos, kafka-bridge-fips, airbyte-server, knative-kafka-broker-fips, nacos-docker, ontop-fips, request-9047-keycloak-fips, apache-nifi, ontop, kafka-bridge, keycloak-fips, apicurio-registry, airbyte-server-fips,...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: keycloak, dependency-track, hono, knative-kafka-broker, nacos, kafka-bridge-fips, airbyte-server, knative-kafka-broker-fips, nacos-docker, ontop-fips, request-9047-keycloak-fips, apache-nifi, ontop, kafka-bridge, keycloak-fips, apicurio-registry, airbyte-server-fips,...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: metabase, apache-tika-fips, apache-tika, copybara-fips, apache-hop, elasticsearch, conductor-fips, jmeter, elasticsearch-fips, conductor, apache-hop-fips, opensearch, gradle, jbang, opensearch-fips, spdx-tools-java, nextflow, scala, copybara, wazuh-indexer...
CVE-2026-71497 vulnerabilities
Vulnerabilities for packages: metabase, apache-tika-fips, apache-tika, copybara-fips, apache-hop, elasticsearch, conductor-fips, jmeter, elasticsearch-fips, conductor, apache-hop-fips, opensearch, gradle, jbang, opensearch-fips, spdx-tools-java, nextflow, scala, copybara, wazuh-indexer...
CVE-2026-41186 vulnerabilities
Vulnerabilities for packages: calico-fips...
CVE-2026-6540 vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-38W4-QXG9-XG36 vulnerabilities
Vulnerabilities for packages: calico-fips...
GHSA-GM75-WG2C-P77X vulnerabilities
Vulnerabilities for packages: calico-fips...