Known vulnerabilities in bouncycastle-tls

Known vulnerabilities in bouncycastle-tls

Vendor: OpenAnolis

Software: bouncycastle-tls

Software CPE: cpe:2.3:o:openanolis:bouncycastle-tls:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU146441 - Uncontrolled Memory Allocation CVE-2026-12852	CWE-789	Medium	No	No	1.84-2	31.08.2026	SB2026083171 SB20260831105 SB2026092175
#VU132262 - Resource exhaustion CVE-2026-3505	CWE-400	Medium	No	No	1.84-1	25.05.2026	SB2026052529 SB2026052531 SB2026052542 and 4 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2026-0636	CWE-90	Medium	No	No	1.84-1	25.05.2026	SB2026052529 SB2026052531 SB2026052540 and 16 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-5588	CWE-327	Medium	No	No	1.84-1	25.05.2026	SB2026052529 SB2026052531 SB2026052540 and 18 more
#VU117436 - Allocation of Resources Without Limits or Throttling CVE-2025-8916	CWE-770	Medium	No	No	1.79-1	21.10.2025	SB2025102223 SB2025102241 SB2025102248 and 36 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30172	CWE-835	Medium	No	No	1.78-1	07.05.2024	SB2024050731 SB2024061019 SB20240611170 and 62 more
#VU89219 - Observable discrepancy CVE-2024-30171	CWE-203	Medium	No	No	1.77-1	07.05.2024	SB2024050731 SB2024050734 SB2024061019 and 59 more
#VU89218 - Resource exhaustion CVE-2024-29857	CWE-400	Medium	No	No	1.78-1	07.05.2024	SB2024050731 SB2024061019 SB20240611170 and 69 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201	CWE-90	Medium	No	No	1.70-3	17.07.2023	SB2023071740 SB2023071742 SB2023071902 and 91 more