Vulnerabilities in Legion of the Bouncy Castle Inc.
85 resultsCVE-2026-63571HIGHAttribute certificate path validation does not verify the attribute certificate's signatureEPSS 0.1%CVE-2026-15997LOWNative ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded stateEPSS 0.1%CVE-2026-71888HIGHCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentEPSS 0.1%CVE-2026-18040MEDIUMHQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight samplerEPSS 0.1%CVE-2026-71887HIGHOpenPGP data signature accepted from a signing subkey without cross-certificationEPSS 0.1%