Vulnerabilidades en Legion of the Bouncy Castle Inc.
85 resultadosCVE-2026-63576HIGHURI name constraints checked against a mis-parsed hostEPSS 0.2%CVE-2026-63577HIGHName Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixEPSS 0.2%CVE-2026-71885CRITICALMLS X.509 credential not bound to the LeafNode signature keyEPSS 0.2%CVE-2026-59651HIGHBKS keystore accepts legacy version with 16-bit integrity MAC keyEPSS 0.2%CVE-2026-12802HIGHCMS AuthEnvelopedData fails to enforce tag-length on decryptionEPSS 0.2%CVE-2026-12816HIGHIESEngine stream-mode MAC forgery via length-dependent KDF splitEPSS 0.2%CVE-2026-59641HIGHS/MIME validator trusts signer-asserted signingTime for path validationEPSS 0.2%CVE-2025-9340NONEnative encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.EPSS 0.2%CVE-2026-71891HIGHBLS12-381 key validation accepts a public key built on a foreign curveEPSS 0.2%CVE-2026-71892MEDIUMCMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keysEPSS 0.2%CVE-2026-12860HIGHRSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathEPSS 0.2%CVE-2026-12817HIGHOpenPGP AEAD decryption skips final tag on chunk-aligned dataEPSS 0.2%CVE-2026-71886HIGHOpenPGP certification accepted from a subkey without certification authorityEPSS 0.2%CVE-2026-71889HIGHPKIXCertPathReviewer does not apply X.509 name constraints to the target certificateEPSS 0.2%CVE-2025-9341MEDIUMGarbage collection can delay for AES CBC Native support, resulting in heap exhaustionEPSS 0.2%CVE-2025-9092LOWHybrid Module Deployment in Multi-JVM Environments Leading to Resource ExhaustionEPSS 0.2%CVE-2026-8149MEDIUMGCM chunking can lead to bad tag exception on decryptionEPSS 0.2%CVE-2026-85515HIGHOpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkEPSS 0.2%CVE-2025-12194MEDIUMUncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules)EPSS 0.2%CVE-2026-16001HIGHIesEngine stream-mode MAC forgery via length-dependent KDF splitEPSS 0.2%