Security
فارسی
All products

Red Hat build of Apache Camel 4 for Quarkus 3/bcpg-jdk18on

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle Uncontrolled Resource Consumption vulnerabilityCVE-2026-3505 · GHSA-CJ8J-37RH-8475 org.bouncycastle:bcpg-jdk12org.bouncycastle:bcpg-jdk14 MavenRed Hat High Fix reported
Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC org.bouncycastle:bc-fipsCryostat 4/bcpkix-jdk18on MavenRed Hat Low Fix reported
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive AllocationCVE-2025-8916 · GHSA-4CX2-FC23-5WG6 org.bouncycastle:bcpkix-fipsorg.bouncycastle:bcpkix-jdk15on MavenRed Hat Medium Fix reported
org.bouncycastle/bcpg-jdk18on: org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-lts8on: org.bouncycastle/bcpg-jdk15to18: org.bouncycastle/bcpg-jdk15on: Bouncy Castle: Integrity check bypass via truncated OpenPGP messagesCVE-2026-85515 OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins Red Hat Medium No fix reported
org.bouncycastle/bcpg-jdk18on: org.bouncycastle/bcpg-jdk15to18: Bouncy Castle: Signature misattribution via missing subkey cross-certification validationCVE-2026-71887 OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins Red Hat High No fix reported
org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket lengthCVE-2026-59649 OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins Red Hat High No fix reported
bouncycastle: org.bouncycastle:bcpg-jdk18on: org.bouncycastle:bcpg-jdk15to18: bouncycastle: Unauthorized trust delegation via unverified subkey certification flagsCVE-2026-71886 Red Hat JBoss Enterprise Application Platform 7/bcpg-jdk18onRed Hat JBoss Enterprise Application Platform 8/bcpg-jdk18on Red Hat Medium No fix reported