# Bouncycastle Bc-Java


- [CVE-2007-6721](https://insights.sbomify.com/CVE-2007-6721/): Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability (critical 10.0)
- [CVE-2018-1000613](https://insights.sbomify.com/CVE-2018-1000613/): Deserialization of Untrusted Data in Bouncy castle (critical 9.8)
- [CVE-2026-58062](https://insights.sbomify.com/CVE-2026-58062/): Stapled OCSP response accepted without binding to the checked certificate (critical 9.3)
- [CVE-2026-59638](https://insights.sbomify.com/CVE-2026-59638/): JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (critical 9.3)
- [CVE-2026-59650](https://insights.sbomify.com/CVE-2026-59650/): MTI/A0 DH agreement exponentiates unvalidated peer value (critical 9.3)
- [CVE-2026-8763](https://insights.sbomify.com/CVE-2026-8763/): Name Constraints bypass via trailing dot in rfc822Name and URI (critical 9.3)
- [CVE-2026-17507](https://insights.sbomify.com/CVE-2026-17507/): MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender (high 8.7)
- [CVE-2026-12802](https://insights.sbomify.com/CVE-2026-12802/): CMS AuthEnvelopedData fails to enforce tag-length on decryption (high 8.7)
- [CVE-2026-12803](https://insights.sbomify.com/CVE-2026-12803/): KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) (high 8.7)
- [CVE-2026-12816](https://insights.sbomify.com/CVE-2026-12816/): IESEngine stream-mode MAC forgery via length-dependent KDF split (high 8.7)
- [CVE-2026-12817](https://insights.sbomify.com/CVE-2026-12817/): OpenPGP AEAD decryption skips final tag on chunk-aligned data (high 8.7)
- [CVE-2026-12852](https://insights.sbomify.com/CVE-2026-12852/): MLS wire decoder allocates attacker-declared opaque length before bounds check (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/bouncycastle/bc-java/