Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

bcpg-lts8on

4 known vulnerabilities (3 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 high, 1 medium

Advisories 4

  • OpenPGP AEAD decryption skips final tag on chunk-aligned data

    Affected: from 2.73.0, fixed in 2.73.12.

  • OpenPGP CFB quick-check oracle active on symmetric/session-key paths

    Affected: from 2.73.0, fixed in 2.73.12.

  • CVE-2026-59648Medium 6.9

    OpenPGP Argon2 S2K honours attacker-chosen memory and passes

    Affected: from 2.73.0, fixed in 2.73.12.

  • OpenPGP user-attribute subpacket length bounded only by JVM max memory

    Affected: from 2.73.0, fixed in 2.73.12.