VendorsBouncy Castlebctls-fipsall versions
Vulnerabilities

Bouncy Castle Bctls-fips

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-59638
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
Published 2026-08-03 · Analyzed
9.3EPSS 0.003
CVE-2026-59646
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
Published 2026-08-03 · Analyzed
8.7EPSS 0.006
CVE-2026-14682
Possible OOM from unbounded up-front allocation on a definite-length read
Published 2026-08-03 · Analyzed
8.7EPSS 0.003