- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 16 · 2 critical, 10 high, 4 medium
Advisories 16
- CVE-2026-13586Medium 5.3
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-13506High 8.7
Lazy ASN.1 sequence forcing resets nesting-depth guard
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-12860High 8.7
RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-12816High 8.7
IESEngine stream-mode MAC forgery via length-dependent KDF split
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-12803High 8.7
KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-14682High 8.7
Possible OOM from unbounded up-front allocation on a definite-length read
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-58059High 8.7
Quadratic-time escaping when stringifying X.500 distinguished names
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-58060High 8.7
HSS public-key level count unbounded, enabling huge allocation on verify
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-58061High 8.7
CCM-family modes write plaintext to caller buffer before tag check
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-58062Critical 9.3
Stapled OCSP response accepted without binding to the checked certificate
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-58063Medium 5.3
BCFKS keystore load honours unbounded KDF cost from untrusted file
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-59650Critical 9.3
MTI/A0 DH agreement exponentiates unvalidated peer value
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-59651High 7.1
BKS keystore accepts legacy version with 16-bit integrity MAC key
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2026-12185High 7.1
BKS/UBER keystore allocates from untrusted lengths before integrity check
Affected: from 2.73.0, fixed in 2.73.12.
- CVE-2025-12194Medium 5.9
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc.
Affected: from 2.73.0, through 2.73.7.
- CVE-2025-9341Medium 5.9
Garbage collection can delay for AES CBC Native support, resulting in heap exhaustion
Affected: from 2.73.0, through 2.73.7.