| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-97873 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy P ... |
| CVE-2026-85515 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted m ... |
| CVE-2026-71892 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the opt-in key-size validation ... |
| CVE-2026-71891 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidat ... |
| CVE-2026-71890 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) ... |
| CVE-2026-71889 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathRev ... |
| CVE-2026-71888 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the streaming CMS Authenticated ... |
| CVE-2026-71887 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the high-level OpenPGP API acce ... |
| CVE-2026-71886 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the high-level OpenPGP certific ... |
| CVE-2026-71885 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the Messaging Layer Security (M ... |
| CVE-2026-59652 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy ... |
| CVE-2026-59651 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy ver ... |
| CVE-2026-59650 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiat ... |
| CVE-2026-59649 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacke ... |
| CVE-2026-59648 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours atta ... |
| CVE-2026-59647 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours u ... |
| CVE-2026-59646 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allo ... |
| CVE-2026-59645 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OER parser recurses without dep ... |
| CVE-2026-59644 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitr ... |
| CVE-2026-59643 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy ... |
| CVE-2026-59642 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content n ... |
| CVE-2026-59641 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer- ... |
| CVE-2026-59640 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle ... |
| CVE-2026-59639 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, CMS verifySignatures returns tr ... |
| CVE-2026-59638 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallb ... |
| CVE-2026-58063 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unb ... |
| CVE-2026-58062 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted ... |
| CVE-2026-58061 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, CCM-family modes write plaintex ... |
| CVE-2026-58060 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, HSS public-key level count unbo ... |
| CVE-2026-58059 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, Quadratic-time escaping when st ... |
| CVE-2026-18040 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data ... |
| CVE-2026-18036 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with ... |
| CVE-2026-17508 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, several password-based key deri ... |
| CVE-2026-17507 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.86, the MLS implementation (org.bou ... |
| CVE-2026-15055 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honou ... |
| CVE-2026-14682 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up- ... |
| CVE-2026-13586 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption ... |
| CVE-2026-13506 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing res ... |
| CVE-2026-12860 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips l ... |
| CVE-2026-12852 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, MLS wire decoder allocates atta ... |
| CVE-2026-12817 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips f ... |
| CVE-2026-12816 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forge ... |
| CVE-2026-12803 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bi ... |
| CVE-2026-12802 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to ... |
| CVE-2026-12185 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates fro ... |
| CVE-2026-8763 | vulnerable | vulnerable | fixed | fixed | In Bouncy Castle for Java before 1.85, Name Constraints bypass via tra ... |
| CVE-2026-5598 | vulnerable | vulnerable (no DSA) | fixed | fixed | Covert timing channel vulnerability in Legion of the Bouncy Castle Inc ... |
| CVE-2026-5588 | vulnerable | vulnerable (no DSA) | fixed | fixed | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legi ... |
| CVE-2026-3505 | vulnerable | vulnerable (no DSA) | fixed | fixed | Allocation of resources without limits or throttling, Uncontrolled Res ... |
| CVE-2026-0636 | vulnerable | vulnerable (no DSA) | fixed | fixed | Improper neutralization of special elements used in an LDAP query ('LD ... |
| CVE-2025-8916 | vulnerable (no DSA) | fixed | fixed | fixed | Allocation of Resources Without Limits or Throttling vulnerability in ... |
| CVE-2025-8885 | vulnerable (no DSA) | fixed | fixed | fixed | Allocation of Resources Without Limits or Throttling vulnerability in ... |
| CVE-2024-34447 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in the Bouncy Castle Crypto Package For Java b ... |
| CVE-2024-30172 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in Bouncy Castle Java Cryptography APIs before ... |
| CVE-2024-30171 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in Bouncy Castle Java TLS API and JSSE Provide ... |
| CVE-2024-29857 | vulnerable (no DSA) | fixed | fixed | fixed | An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castl ... |
| CVE-2024-14041 | vulnerable | fixed | fixed | fixed | In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYS ... |
| CVE-2023-33202 | vulnerable (no DSA) | fixed | fixed | fixed | Bouncy Castle for Java before 1.73 contains a potential Denial of Serv ... |
| CVE-2023-33201 | vulnerable (no DSA) | fixed | fixed | fixed | Bouncy Castle For Java before 1.74 is affected by an LDAP injection vu ... |
| Bug | Description |
|---|
| CVE-2026-15997 | Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. ... |
| CVE-2020-28052 | An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 an ... |
| CVE-2020-26939 | In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1. ... |
| CVE-2020-15522 | Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA bef ... |
| CVE-2019-17359 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigge ... |
| CVE-2018-1000613 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptogra ... |
| CVE-2018-1000180 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier h ... |
| CVE-2018-5382 | The default BKS keystore use an HMAC that is only 16 bits long, which ... |
| CVE-2017-13098 | BouncyCastle TLS prior to version 1.0.3, when configured to use the JC ... |
| CVE-2016-1000352 | In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES i ... |
| CVE-2016-1000346 | In the Bouncy Castle JCE Provider version 1.55 and earlier the other p ... |
| CVE-2016-1000345 | In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/E ... |
| CVE-2016-1000344 | In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES i ... |
| CVE-2016-1000343 | In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key ... |
| CVE-2016-1000342 | In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does ... |
| CVE-2016-1000341 | In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signatu ... |
| CVE-2016-1000340 | In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propa ... |
| CVE-2016-1000339 | In the Bouncy Castle JCE Provider version 1.55 and earlier the primary ... |
| CVE-2016-1000338 | In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does no ... |
| CVE-2015-7940 | The Bouncy Castle Java library before 1.51 does not validate a point i ... |
| CVE-2015-6644 | Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 ... |
| CVE-2014-3566 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ... |
| CVE-2013-1624 | The TLS implementation in the Bouncy Castle Java library before 1.48 a ... |
| CVE-2013-0169 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as use ... |
| CVE-2011-3389 | The SSL protocol, as used in certain configurations in Microsoft Windo ... |
| CVE-2007-6721 | The Legion of the Bouncy Castle Java Cryptography API before release 1 ... |