bctls-fips vulnerabilities

CVEs whose affected-version data names the bctls-fips package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-14682High· 7.5

1mo ago

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read

In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips …

▾ Twilightbouncycastle · bc-javaEPSS 0.31%via NVD