Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat
· Package
19 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard
CVE-2026-13506 · GHSA-QP49-QGX5-5M26
org.bouncycastle:bc-fips
org.bouncycastle:bcprov-jdk15to18
Maven
Red Hat
High
Fix reported
2026-09-18
Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability
CVE-2025-9092 · GHSA-V6CF-MV9H-C8MC
org.bouncycastle:bc-fips
Cryostat 4/bcpkix-jdk18on
Maven
Red Hat
Low
Fix reported
2026-09-10
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
CVE-2025-8916 · GHSA-4CX2-FC23-5WG6
org.bouncycastle:bcpkix-fips
org.bouncycastle:bcpkix-jdk15on
Maven
Red Hat
Medium
Fix reported
2026-09-10
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore
CVE-2026-59651
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer value
CVE-2026-59650
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Build of Keycloak/bcprov-jdk18on
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursion
CVE-2026-59645
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/libarrow
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Data integrity bypass due to improper cryptographic binding in CMS AuthenticatedData
CVE-2026-59642
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/ceph
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypass
CVE-2026-59639
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/ceph
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bc-java: org.bouncycastle/bc-fja: Bouncy Castle for Java: Integrity bypass in CCM-family modes
CVE-2026-58061
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/libarrow
Red Hat
High
No fix reported
Not recorded
bouncycastle: Bouncy Castle for Java: Denial of Service via unbounded HSS public-key level count
CVE-2026-58060
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/libarrow
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names
CVE-2026-58059
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation
CVE-2026-14682
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
bouncycastle: bcpkix-fips: Bouncy Castle for Java: Integrity compromise due to insufficient tag-length enforcement in CMS AuthEnvelopedData decryption.
CVE-2026-12802
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Ceph Storage 9/libarrow
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bc-java: Bouncy Castle for Java: Authenticated Encryption Forgery Vulnerability
CVE-2026-12803
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Build of Keycloak/bcprov-jdk18on
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split
CVE-2026-12816
Red Hat AMQ Broker 7/bcprov-jdk18on
Red Hat Build of Keycloak/bcprov-jdk18on
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification
CVE-2026-12860
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
bouncycastle: Bouncy Castle for Java: Denial of Service via PKCS#12 MAC and bag-decryption KDF iteration-count bound
CVE-2026-13586
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
Medium
No fix reported
Not recorded
org.bouncycastle:bcprov-jdk18on: org.bouncycastle:bcprov-lts8on: bouncycastle: org.bouncycastle:bcprov-jdk15on: bouncycastle: Denial of Service via unbounded iteration count in password-based encryption
CVE-2026-97873
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel9
Red Hat
Medium
No fix reported
Not recorded
bouncycastle: bcprov-jdk18on: bouncycastle: Information disclosure via cryptographic side channels in HQC
CVE-2026-18040
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
Medium
No fix reported
Not recorded