Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.bouncycastle:bcpkix-jdk18on

3 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium
Registry
Maven Central

Advisories 3

  • CVE-2026-5588Medium 6.3

    PKIX draft CompositeVerifier accepts empty signature sequence as valid.

    Affected: from 1.49, fixed in 1.84.

  • CVE-2025-8916Medium 6.3

    Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer

    Affected: from 1.44, fixed in 1.79.

  • Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle…

    Affected: fixed in 1.73.