Product by Legion of the Bouncy Castle
Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api
14 known vulnerabilities in Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api (Legion of the Bouncy Castle), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-1000180 | Oracle Business Process Management Suite: security vulnerability | 7.5 | |
| High | CVE-2026-58060 | HSS public-key level count unbounded, enabling huge allocation on verify | 7.5 | |
| High | CVE-2026-13506 | Lazy ASN.1 sequence forcing resets nesting-depth guard | 7.5 | |
| High | CVE-2026-14682 | Possible OOM from unbounded up-front allocation on a definite-length read | 7.5 | |
| High | CVE-2026-58059 | Quadratic-time escaping when stringifying X.500 distinguished names | 7.5 | |
| Critical | CVE-2026-8763 | Name Constraints bypass via trailing dot in rfc822Name and URI | 9.1 | |
| High | CVE-2026-13586 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) | 7.5 | |
| Critical | CVE-2026-58062 | Stapled OCSP response accepted without binding to the checked certificate | 9.1 | |
| Medium | CVE-2020-15522 | Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api: security vulnerability | 5.9 | |
| High | CVE-2026-58061 | CCM-family modes write plaintext to caller buffer before tag check | 7.5 | |
| Medium | CVE-2023-33202 | Legion of the Bouncy Castle Bouncy Castle For Java: Denial of Service | 5.5 | |
| Medium | CVE-2026-58063 | BCFKS keystore load honours unbounded KDF cost from untrusted file | 5.3 | |
| Medium | CVE-2020-26939 | Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api: Information Disclosure | 5.3 | |
| Medium | CVE-2022-45146 | Bouncy Castle FIPS Java API (BC-FJA) Fips Java Api: security vulnerability | 5.5 |