Approved changes feed: RSS · Atom
cpe:2.3:a:legion_of_the_bouncy_castle_inc.:bc-java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Legion Of The Bouncy Castle Inc. (e4a6587a-5507-5db2-9124-4805610f6129) |
|---|---|
| Product | Bc Java (1b806a8f-3c40-59e4-a6dc-c7b06288345d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5598 |
vulnerable | 2026-06-08 08:07:03.883986 |
Non-constant time comparisons risk private key leakage in FrodoKEM.
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).
This vulnerability is associated with program files FrodoEngine.Java.
This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.80.1, from 1.82 before 1.84.
Published: 2026-04-15T09:05:56.277Z
Updated: 2026-05-18T23:17:39.880Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5588 |
vulnerable | 2026-06-08 08:07:03.876504 |
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).
This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.
This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11.
Published: 2026-04-15T09:06:15.617Z
Updated: 2026-05-18T23:22:57.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3505 |
vulnerable | 2026-06-08 08:01:18.873611 |
Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules).
This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java.
This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Published: 2026-04-15T09:06:37.939Z
Updated: 2026-05-18T23:21:21.526Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0636 |
vulnerable | 2026-06-08 07:47:12.826778 |
LDAP Injection Vulnerability in LDAPStoreHelper.java
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).
This vulnerability is associated with program files LDAPStoreHelper.
This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Published: 2026-04-15T08:59:12.677Z
Updated: 2026-05-18T23:20:07.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14813 |
vulnerable | 2026-06-08 07:06:35.184477 |
GOSTCTR implementation unable to process more than 255 blocks correctly
: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules).
This vulnerability is associated with program files G3413CTRBlockCipher.
This issue affects BC-JAVA: from 1.59 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Published: 2026-04-15T08:56:34.057Z
Updated: 2026-05-18T23:15:49.105Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.