Red Hat Single Sign-On 7/bcprov-jdk15on

Red Hat · Package

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Bouncy Castle has an LDAP injectionCVE-2026-0636 · GHSA-C3FC-8QFF-9HWX	org.bouncycastle:bcprov-jdk14 org.bouncycastle:bcprov-jdk15to18	MavenRed Hat	Medium	Fix reported	2026-11-04
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26	org.bouncycastle:bc-fips org.bouncycastle:bcprov-jdk15to18	MavenRed Hat	Critical	Fix reported	2026-09-18
Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC	org.bouncycastle:bc-fips Cryostat 4/bcpkix-jdk18on	MavenRed Hat	Low	Fix reported	2026-09-10
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23	org.bouncycastle:bc-fips org.bouncycastle:bcprov-jdk14	MavenRed Hat	Medium	Fix reported	2026-09-10
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive AllocationCVE-2025-8916 · GHSA-4CX2-FC23-5WG6	org.bouncycastle:bcpkix-fips org.bouncycastle:bcpkix-jdk15on	MavenRed Hat	Medium	Fix reported	2026-09-10
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bc-fips: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of service due to unbounded KDF cost in PKCS#8 / PBES2 decryptorsCVE-2026-15055	Red Hat AMQ Clients/bcprov-jdk15on Red Hat Ceph Storage 9/ceph	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystoreCVE-2026-59651	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded
bouncycastle: Bouncy Castle for Java: Cryptographic key compromise due to unvalidated Diffie-Hellman peer valueCVE-2026-59650	Red Hat AMQ Broker 7/bcprov-jdk18on Red Hat Build of Keycloak/bcprov-jdk18on	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-fips: Bouncy Castle for Java: Denial of Service via unbounded iteration in CRMF/CMP password-MACCVE-2026-59647	Red Hat JBoss Enterprise Application Platform 7/bcprov-jdk15on Red Hat Single Sign-On 7/bcprov-jdk15on	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcutil-fips: Bouncy Castle for Java: Denial of Service via OER parser unbounded recursionCVE-2026-59645	Red Hat AMQ Broker 7/bcprov-jdk18on Red Hat Ceph Storage 9/libarrow	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Denial of Service via unbounded KDF cost in BCFKS keystore loadCVE-2026-58063	Red Hat Enterprise Linux 9/jmc Red Hat JBoss Enterprise Application Platform 7/bcprov-jdk15on	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP responseCVE-2026-58062	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded
org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocationCVE-2026-14682	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	High	No fix reported	Not recorded