CVE-2026-5588

The Bouncy Castle cryptographic library (specifically the bcpkix modules) contains a vulnerability where the PKIX draft CompositeVerifier incorrectly accepts an empty signature sequence as valid. This is categorized as a Use of a Broken or Risky Cryptographic Algorithm vulnerability. The issue is...