Approved changes feed: RSS · Atom

cpe:2.3:a:legion_of_the_bouncy_castle_inc.:bc-lts-java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLegion Of The Bouncy Castle Inc. (e4a6587a-5507-5db2-9124-4805610f6129)
ProductBc Lts Java (3e90d42c-27f1-59ff-9489-7c359a88b1b5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14682 vulnerable 2026-09-16 04:33:12.145136 Possible OOM from unbounded up-front allocation on a definite-length read
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.
Published: 2026-08-03T02:44:13.256Z
Updated: 2026-08-04T09:24:50.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15055 vulnerable 2026-09-16 04:33:06.186622 PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).
Published: 2026-08-03T00:32:51.477Z
Updated: 2026-08-03T13:28:42.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8763 vulnerable 2026-09-16 04:32:57.932819 Name Constraints bypass via trailing dot in rfc822Name and URI
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Published: 2026-08-03T00:36:05.088Z
Updated: 2026-10-05T01:16:57.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12860 vulnerable 2026-09-16 04:32:51.242649 RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
Published: 2026-08-03T02:55:58.379Z
Updated: 2026-08-03T15:10:17.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12802 vulnerable 2026-09-16 04:32:51.160766 CMS AuthEnvelopedData fails to enforce tag-length on decryption
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).
Published: 2026-08-03T02:48:42.672Z
Updated: 2026-08-03T15:28:12.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12816 vulnerable 2026-09-16 04:32:51.074797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12817 vulnerable 2026-09-16 04:32:50.953439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12185 vulnerable 2026-09-16 04:32:50.844460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12803 vulnerable 2026-09-16 04:32:50.715461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13506 vulnerable 2026-09-16 04:32:50.299816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13586 vulnerable 2026-09-16 04:32:49.975476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59640 vulnerable 2026-09-16 04:32:47.320590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59650 vulnerable 2026-09-16 04:32:47.216552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59648 vulnerable 2026-09-16 04:32:47.072288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59651 vulnerable 2026-09-16 04:32:46.954716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59649 vulnerable 2026-09-16 04:32:46.944270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59645 vulnerable 2026-09-16 04:32:46.921082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59641 vulnerable 2026-09-16 04:32:46.882679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59647 vulnerable 2026-09-16 04:32:46.806222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59639 vulnerable 2026-09-16 04:32:46.790289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59646 vulnerable 2026-09-16 04:32:46.740973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59638 vulnerable 2026-09-16 04:32:46.720647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59642 vulnerable 2026-09-16 04:32:46.708008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58060 vulnerable 2026-09-16 04:32:43.000067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58059 vulnerable 2026-09-16 04:32:42.915550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58061 vulnerable 2026-09-16 04:32:42.777862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58063 vulnerable 2026-09-16 04:32:42.617475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58062 vulnerable 2026-09-16 04:32:42.516278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.