Product by Legion of the Bouncy Castle

    Bouncy Castle Bcpg-fips

    5 known vulnerabilities in Bouncy Castle Bcpg-fips (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bouncy Castle Bcpg-fips (Legion of the Bouncy Castle)
    HighCVE-2026-59649

    OpenPGP user-attribute subpacket length bounded only by JVM max memory

    also in 8 other products

    		7.5
    HighCVE-2026-59640

    OpenPGP CFB quick-check oracle active on symmetric/session-key paths

    also in 7 other products

    		5.3
    HighCVE-2026-59643

    OpenPGP inline-signature policy failures silently ignored

    also in 5 other products

    		7.5
    MediumCVE-2026-59648

    OpenPGP Argon2 S2K honours attacker-chosen memory and passes

    also in 9 other products

    		5.3
    HighCVE-2026-12817

    OpenPGP AEAD decryption skips final tag on chunk-aligned data

    also in 8 other products

    		8.6

    All products by Legion of the Bouncy Castle