Known vulnerabilities in Bouncy Castle for Java LTS

Vendor: Legion of the Bouncy Castle Inc.
Software: Bouncy Castle for Java LTS
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-lts:*:*:*:*:*:*:*:*
Website: https://www.bouncycastle.org/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java LTS Bouncy Castle for Java LTS is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132272 - Inconsistency Between Implementation and Documented Design
CVE-2026-8149		 CWE-1068 Medium
No
No
 2.73.11 25.05.2026 SB2026052535
#VU132271 - Resource exhaustion
CVE-2025-12194		 CWE-400 Medium
No
No
 2.73.7 25.05.2026 SB2026052534
#VU132270 - Resource exhaustion
CVE-2025-9341		 CWE-400 Medium
No
No
 2.73.8 25.05.2026 SB2026052534