Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 8/bcprov-jdk18on
Red Hat
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Bouncy Castle has an LDAP injection
CVE-2026-0636 · GHSA-C3FC-8QFF-9HWX
org.bouncycastle:bcprov-jdk14
org.bouncycastle:bcprov-jdk15to18
Maven
Red Hat
Medium
Fix reported
2026-11-04
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks
CVE-2025-14813 · GHSA-574F-3G2M-X479
org.bouncycastle:bcprov-debug-jdk14
org.bouncycastle:bcprov-debug-jdk15on
Maven
Red Hat
Critical
Fix reported
2026-09-24
Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability
CVE-2025-9092 · GHSA-V6CF-MV9H-C8MC
org.bouncycastle:bc-fips
Cryostat 4/bcpkix-jdk18on
Maven
Red Hat
Low
Fix reported
2026-09-10
Bouncy Castle for Java on All (API modules) allows Excessive Allocation
CVE-2025-8885 · GHSA-67MF-3CR5-8W23
org.bouncycastle:bc-fips
org.bouncycastle:bcprov-jdk14
Maven
Red Hat
Medium
Fix reported
2026-09-10
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
CVE-2025-8916 · GHSA-4CX2-FC23-5WG6
org.bouncycastle:bcpkix-fips
org.bouncycastle:bcpkix-jdk15on
Maven
Red Hat
Medium
Fix reported
2026-09-10
org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names
CVE-2026-58059
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification
CVE-2026-12860
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
High
No fix reported
Not recorded
bouncycastle: Bouncy Castle for Java: Denial of Service via PKCS#12 MAC and bag-decryption KDF iteration-count bound
CVE-2026-13586
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
Medium
No fix reported
Not recorded
org.bouncycastle:bcprov-jdk18on: org.bouncycastle:bcprov-lts8on: bouncycastle: org.bouncycastle:bcprov-jdk15on: bouncycastle: Denial of Service via unbounded iteration count in password-based encryption
CVE-2026-97873
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel9
Red Hat
Medium
No fix reported
Not recorded
bouncycastle: bcprov-jdk18on: bouncycastle: Information disclosure via cryptographic side channels in HQC
CVE-2026-18040
OpenShift Developer Tools and Services/jenkins-2-plugins
OpenShift Developer Tools and Services/jenkins
Red Hat
Medium
No fix reported
Not recorded