agentprime: legion-of-the-bouncy-castle-inc-bc-csharpEvery new CVE for legion-of-the-bouncy-castle-inc-bc-csharp.https://agentprime.io/CVE-2026-103604: Quadratic-time escaping when converting X.509 distinguished names to stringshttps://agentprime.io/advisories/CVE-2026-103604/https://agentprime.io/advisories/CVE-2026-103604/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:11:04 GMTCVECVE-2026-103603: Unbounded HSS public key level count allows huge array allocation during signature verificationhttps://agentprime.io/advisories/CVE-2026-103603/https://agentprime.io/advisories/CVE-2026-103603/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:10:34 GMTCVECVE-2026-103602: Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hostshttps://agentprime.io/advisories/CVE-2026-103602/https://agentprime.io/advisories/CVE-2026-103602/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:10:03 GMTCVECVE-2026-103601: CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag checkhttps://agentprime.io/advisories/CVE-2026-103601/https://agentprime.io/advisories/CVE-2026-103601/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:09:17 GMTCVECVE-2026-103600: Unbounded ASN.1 nesting depth causes process-terminating stack overflowhttps://agentprime.io/advisories/CVE-2026-103600/https://agentprime.io/advisories/CVE-2026-103600/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:08:51 GMTCVECVE-2026-63578: Unbounded PBE iteration count when decrypting PKCS#8 private keyshttps://agentprime.io/advisories/CVE-2026-63578/https://agentprime.io/advisories/CVE-2026-63578/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:08:15 GMTCVECVE-2026-63577: Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefixhttps://agentprime.io/advisories/CVE-2026-63577/https://agentprime.io/advisories/CVE-2026-63577/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:07:35 GMTCVECVE-2026-63576: URI name constraints checked against a mis-parsed hosthttps://agentprime.io/advisories/CVE-2026-63576/https://agentprime.io/advisories/CVE-2026-63576/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:07:02 GMTCVECVE-2026-63575: PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration counthttps://agentprime.io/advisories/CVE-2026-63575/https://agentprime.io/advisories/CVE-2026-63575/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:06:31 GMTCVECVE-2026-63574: Unbounded allocation from OpenPGP signature and user attribute subpacket lengthshttps://agentprime.io/advisories/CVE-2026-63574/https://agentprime.io/advisories/CVE-2026-63574/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:06:00 GMTCVECVE-2026-63573: Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwraphttps://agentprime.io/advisories/CVE-2026-63573/https://agentprime.io/advisories/CVE-2026-63573/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:05:30 GMTCVECVE-2026-63572: Unbounded MAC and bag-decryption iteration counts when loading PKCS#12 fileshttps://agentprime.io/advisories/CVE-2026-63572/https://agentprime.io/advisories/CVE-2026-63572/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:04:37 GMTCVECVE-2026-63571: Attribute certificate path validation does not verify the attribute certificate's signaturehttps://agentprime.io/advisories/CVE-2026-63571/https://agentprime.io/advisories/CVE-2026-63571/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:04:17 GMTCVECVE-2026-63570: Pkcs12Store.GetCertificateChain loops forever on cyclic issuer linkshttps://agentprime.io/advisories/CVE-2026-63570/https://agentprime.io/advisories/CVE-2026-63570/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:01:18 GMTCVECVE-2026-63569: MTI/A0 DHAgreement does not validate the peer's ephemeral valuehttps://agentprime.io/advisories/CVE-2026-63569/https://agentprime.io/advisories/CVE-2026-63569/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:00:23 GMTCVEcriticalCVE-2026-63568: Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustionhttps://agentprime.io/advisories/CVE-2026-63568/https://agentprime.io/advisories/CVE-2026-63568/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:59:30 GMTCVECVE-2026-63567: IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)https://agentprime.io/advisories/CVE-2026-63567/https://agentprime.io/advisories/CVE-2026-63567/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:58:32 GMTCVECVE-2026-63566: DTLS handshake reassembler allocates buffer from unchecked 24-bit lengthhttps://agentprime.io/advisories/CVE-2026-63566/https://agentprime.io/advisories/CVE-2026-63566/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:57:21 GMTCVECVE-2026-16001: IesEngine stream-mode MAC forgery via length-dependent KDF splithttps://agentprime.io/advisories/CVE-2026-16001/https://agentprime.io/advisories/CVE-2026-16001/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:55:36 GMTCVECVE-2026-16000: KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedhttps://agentprime.io/advisories/CVE-2026-16000/https://agentprime.io/advisories/CVE-2026-16000/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:54:23 GMTCVECVE-2026-15999: AES-CCM decryption accepts zero or out-of-range tag length, bypassing authenticationhttps://agentprime.io/advisories/CVE-2026-15999/https://agentprime.io/advisories/CVE-2026-15999/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 06:52:16 GMTCVE