VendorsBouncy Castlebctls-fipsany version
Vulnerabilities

Bouncy Castle Bctls-fips any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-59638
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
Published 2026-08-03 · Analyzed
9.3EPSS 0.002
CVE-2026-59646
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
Published 2026-08-03 · Analyzed
8.7EPSS 0.004
CVE-2026-14682
Possible OOM from unbounded up-front allocation on a definite-length read
Published 2026-08-03 · Analyzed
8.7EPSS 0.003