| Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocksCVE-2025-14813 · GHSA-574F-3G2M-X479 |
org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on |
MavenRed Hat |
Critical
|
Fix reported |
|
| Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 |
MavenRed Hat |
Critical
|
Fix reported |
|
| Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC |
org.bouncycastle:bc-fipsCryostat 4/bcpkix-jdk18on |
MavenRed Hat |
Low
|
Fix reported |
|
| Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 |
org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive AllocationCVE-2025-8916 · GHSA-4CX2-FC23-5WG6 |
org.bouncycastle:bcpkix-fipsorg.bouncycastle:bcpkix-jdk15on |
MavenRed Hat |
Medium
|
Fix reported |
|
| org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bc-fips: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of service due to unbounded KDF cost in PKCS#8 / PBES2 decryptorsCVE-2026-15055 |
Red Hat AMQ Clients/bcprov-jdk15onRed Hat Ceph Storage 9/ceph |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystoreCVE-2026-59651 |
OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins |
Red Hat |
High
|
No fix reported |
|
| bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer valueCVE-2026-59650 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Build of Keycloak/bcprov-jdk18on |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of Service via unbounded iteration in CRMF/CMP password-MACCVE-2026-59647 |
Red Hat JBoss Enterprise Application Platform 7/bcprov-jdk15onRed Hat Single Sign-On 7/bcprov-jdk15on |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursionCVE-2026-59645 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/libarrow |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Data integrity bypass due to improper cryptographic binding in CMS AuthenticatedDataCVE-2026-59642 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/ceph |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Cryptographic signature bypassCVE-2026-59639 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/ceph |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore loadCVE-2026-58063 |
Red Hat Enterprise Linux 9/jmcRed Hat JBoss Enterprise Application Platform 7/bcprov-jdk15on |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP responseCVE-2026-58062 |
OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bc-java: org.bouncycastle/bc-fja: Bouncy Castle for Java: Integrity bypass in CCM-family modesCVE-2026-58061 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/libarrow |
Red Hat |
High
|
No fix reported |
|
| bouncycastle: Bouncy Castle for Java: Denial of Service via unbounded HSS public-key level countCVE-2026-58060 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/libarrow |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocationCVE-2026-14682 |
OpenShift Developer Tools and Services/jenkins-2-pluginsOpenShift Developer Tools and Services/jenkins |
Red Hat |
High
|
No fix reported |
|
| bouncycastle: bcpkix-fips: Bouncy Castle for Java: Integrity compromise due to insufficient tag-length enforcement in CMS AuthEnvelopedData decryption.CVE-2026-12802 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Ceph Storage 9/libarrow |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) splitCVE-2026-12816 |
Red Hat AMQ Broker 7/bcprov-jdk18onRed Hat Build of Keycloak/bcprov-jdk18on |
Red Hat |
High
|
No fix reported |
|
| org.bouncycastle:bcprov-jdk18on: org.bouncycastle:bcprov-lts8on: bouncycastle: org.bouncycastle:bcprov-jdk15on: bouncycastle: Denial of Service via unbounded iteration count in password-based encryptionCVE-2026-97873 |
OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel9 |
Red Hat |
Medium
|
No fix reported |
|
