What’s Vulnerable › Products

Bouncycastle Bcpg-Fips vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Bouncycastle Bcpg-Fips version is affected

Latest Bouncycastle Bcpg-Fips vulnerabilities

• CVE-2026-12817 — OpenPGP AEAD decryption skips final tag on chunk-aligned data (CVSS 8.6)
• CVE-2026-59649 — OpenPGP user-attribute subpacket length bounded only by JVM max memory (CVSS 7.5)
• CVE-2026-59648 — OpenPGP Argon2 S2K honours attacker-chosen memory and passes (CVSS 5.3)
• CVE-2026-59643 — OpenPGP inline-signature policy failures silently ignored (CVSS 7.5)
• CVE-2026-59640 — OpenPGP CFB quick-check oracle active on symmetric/session-key paths (CVSS 5.3)