Product by Open Source
Bouncy Castle Java
13 known vulnerabilities in Bouncy Castle Java (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-71885 | MLS X.509 credential not bound to the LeafNode signature key | — | |
| High | CVE-2026-71890 | MLS external commit can remove an arbitrary group member | — | |
| High | CVE-2026-71889 | PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate | — | |
| High | CVE-2026-71888 | CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent | — | |
| High | CVE-2026-71883 | Native AES packet cipher returns the raw AES key on an alias | — | |
| High | CVE-2026-71886 | OpenPGP certification accepted from a subkey without certification authority | — | |
| High | CVE-2026-85515 | OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check | — | |
| High | CVE-2026-71887 | OpenPGP data signature accepted from a signing subkey without cross-certification | — | |
| Medium | CVE-2025-8916 | Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer | — | |
| High | CVE-2026-71891 | BLS12-381 key validation accepts a public key built on a foreign curve | — | |
| Medium | CVE-2026-71892 | CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys | — | |
| Medium | CVE-2026-18040 | Legion of the Bouncy Castle BC-JAVA: Observable Timing Discrepancy | — | |
| Medium | CVE-2026-97873 | Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider | — |