Known vulnerabilities in Bouncy Castle for Java 1.79
Vendor:
Legion of the Bouncy Castle Inc.
Software:
Bouncy Castle for Java
Version:
1.79
Software CPE:
cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Website:
https://www.bouncycastle.org/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
1.85.2
1.85
1.80.2
1.81.1
1.80.1
1.84
1.83
1.82
1.81
1.80
1.79
1.78.1
1.78
1.77
1.76
1.75
1.74
1.73
1.72.2
1.72
1.71
1.70
1.69
1.68
1.67
1.66
1.65
1.64
1.63
1.62
1.61
1.09
1.08
1.07
1.06
1.05
1.04
1.03
1.02
1.01
1.00
1.60
1.59
1.58
1.57
1.56
1.55
1.54
1.53
1.52
1.51
1.50
1.49
1.48
1.47
1.46
1.45
1.44
1.43
1.42
1.41
1.40
1.39
1.38
1.37
1.36
1.35
1.34
1.33
1.32
1.31
1.30
1.29
1.28
1.27
1.26
1.25
1.24
1.23
1.22
1.21
1.20
1.19
1.18
1.17
1.16
1.15
1.14
1.13
1.12
1.11
1.10
1.9
1.8
1.7
1.6
1.5
1.4
1.3
1.2
1.1
1.0
-
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132273 - Incorrect Calculation CVE-2025-14813 |
CWE-682 | Medium | 1.80.2, 1.81.1, 1.84 | 25.05.2026 |
SB2026052529 SB2026052540 SB2026052541 and 17 more |
||
| #VU132262 - Resource exhaustion CVE-2026-3505 |
CWE-400 | Medium | 1.80.2, 1.81.1, 1.84 | 25.05.2026 |
SB2026052529 SB2026052531 SB2026052542 and 3 more |
||
| #VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2026-0636 |
CWE-90 | Medium | 1.80.2, 1.81.1, 1.84 | 25.05.2026 |
SB2026052529 SB2026052531 SB2026052540 and 13 more |
||
| #VU132260 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-5588 |
CWE-327 | Medium | 1.80.2, 1.81.1, 1.84 | 25.05.2026 |
SB2026052529 SB2026052531 SB2026052540 and 15 more |
||
| #VU132259 - Covert Timing Channel CVE-2026-5598 |
CWE-385 | Medium | 1.80.1, 1.81.1, 1.84 | 25.05.2026 |
SB2026052530 SB2026052544 SB2026052931 and 16 more |