bouncycastle / bcpkix-fips
5 known vulnerabilities in bouncycastle bcpkix-fips.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-15055 | Medium | 0.3% | 8.2 | In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounde… | |
| CVE-2026-59639 | Medium | 0.2% | 7.5 | In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for Sig… | |
| CVE-2026-12802 | Medium | 0.1% | 7.5 | In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce ta… | |
| CVE-2026-59642 | Medium | 0.1% | 7.5 | In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound t… | |
| CVE-2026-59647 | Low | 0.3% | 5.3 | In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded i… |