- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 18 · 2 critical, 11 high, 5 medium
Advisories 18
- CVE-2026-13586Medium 5.3
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
Affected: fixed in 1.85.
- CVE-2026-13506High 8.7
Lazy ASN.1 sequence forcing resets nesting-depth guard
Affected: fixed in 1.85.
- CVE-2026-12860High 8.7
RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
Affected: fixed in 1.85.
- CVE-2026-12816High 8.7
IESEngine stream-mode MAC forgery via length-dependent KDF split
Affected: fixed in 1.85.
- CVE-2026-12803High 8.7
KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)
Affected: fixed in 1.85.
- CVE-2026-14682High 8.7
Possible OOM from unbounded up-front allocation on a definite-length read
Affected: fixed in 1.85.
- CVE-2026-58059High 8.7
Quadratic-time escaping when stringifying X.500 distinguished names
Affected: fixed in 1.85.
- CVE-2026-58060High 8.7
HSS public-key level count unbounded, enabling huge allocation on verify
Affected: from 1.65, fixed in 1.85.
- CVE-2026-58061High 8.7
CCM-family modes write plaintext to caller buffer before tag check
Affected: fixed in 1.85.
- CVE-2026-58062Critical 9.3
Stapled OCSP response accepted without binding to the checked certificate
Affected: from 1.66, fixed in 1.85.
- CVE-2026-58063Medium 5.3
BCFKS keystore load honours unbounded KDF cost from untrusted file
Affected: fixed in 1.85.
- CVE-2026-59650Critical 9.3
MTI/A0 DH agreement exponentiates unvalidated peer value
Affected: fixed in 1.85.
- CVE-2026-59651High 7.1
BKS keystore accepts legacy version with 16-bit integrity MAC key
Affected: fixed in 1.85.
- CVE-2026-59652Medium 6.9
LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
Affected: fixed in 1.85.
- CVE-2026-12185High 7.1
BKS/UBER keystore allocates from untrusted lengths before integrity check
Affected: fixed in 1.85.
Show all 18 advisoriesShow fewer advisories
- CVE-2024-14041High 8.2
ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext…
Affected: from 1.73, fixed in 1.78.
- CVE-2025-8916Medium 6.3
Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer
Affected: from 1.44, through 1.78.
- CVE-2025-8885Medium 6.3
Possible DOS in processing specially formed ASN.1 Object Identifiers
Affected: from 1.0, through 1.77.