Product by Legion of the Bouncy Castle

    Bouncy Castle Bcpkix-fips

    5 known vulnerabilities in Bouncy Castle Bcpkix-fips (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Bouncy Castle Bcpkix-fips (Legion of the Bouncy Castle)
    HighCVE-2026-59642

    CMS AuthenticatedData content not bound to MAC when authAttrs present

    also in 9 other products

    		7.5
    HighCVE-2026-15055

    PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input

    also in 9 other products

    		8.2
    HighCVE-2026-59639

    CMS verifySignatures returns true for SignedData with zero signers

    also in 9 other products

    		7.5
    MediumCVE-2026-59647

    CRMF/CMP password-MAC honours unbounded iteration count

    also in 9 other products

    		5.3
    HighCVE-2026-12802

    CMS AuthEnvelopedData fails to enforce tag-length on decryption

    also in 9 other products

    		7.5

    All products by Legion of the Bouncy Castle