agentprime: legion-of-the-bouncy-castle-inc-bc-fjaEvery new CVE for legion-of-the-bouncy-castle-inc-bc-fja.https://agentprime.io/CVE-2026-71888: CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absenthttps://agentprime.io/advisories/CVE-2026-71888/https://agentprime.io/advisories/CVE-2026-71888/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:36:12 GMTCVECVE-2026-71889: PKIXCertPathReviewer does not apply X.509 name constraints to the target certificatehttps://agentprime.io/advisories/CVE-2026-71889/https://agentprime.io/advisories/CVE-2026-71889/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:31:01 GMTCVECVE-2026-71892: CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keyshttps://agentprime.io/advisories/CVE-2026-71892/https://agentprime.io/advisories/CVE-2026-71892/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:30:26 GMTCVECVE-2026-85515: OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkhttps://agentprime.io/advisories/CVE-2026-85515/https://agentprime.io/advisories/CVE-2026-85515/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:05:16 GMTCVECVE-2026-17508: Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointshttps://agentprime.io/advisories/CVE-2026-17508/https://agentprime.io/advisories/CVE-2026-17508/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:27:59 GMTCVECVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)https://agentprime.io/advisories/CVE-2026-13586/https://agentprime.io/advisories/CVE-2026-13586/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:58:00 GMTCVECVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned datahttps://agentprime.io/advisories/CVE-2026-12817/https://agentprime.io/advisories/CVE-2026-12817/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:54:16 GMTCVECVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryptionhttps://agentprime.io/advisories/CVE-2026-12802/https://agentprime.io/advisories/CVE-2026-12802/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:48:42 GMTCVECVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length readhttps://agentprime.io/advisories/CVE-2026-14682/https://agentprime.io/advisories/CVE-2026-14682/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:44:13 GMTCVECVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished nameshttps://agentprime.io/advisories/CVE-2026-58059/https://agentprime.io/advisories/CVE-2026-58059/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:41:30 GMTCVECVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verifyhttps://agentprime.io/advisories/CVE-2026-58060/https://agentprime.io/advisories/CVE-2026-58060/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:37:43 GMTCVECVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag checkhttps://agentprime.io/advisories/CVE-2026-58061/https://agentprime.io/advisories/CVE-2026-58061/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:36:36 GMTCVECVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificatehttps://agentprime.io/advisories/CVE-2026-58062/https://agentprime.io/advisories/CVE-2026-58062/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:35:28 GMTCVEcriticalCVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted filehttps://agentprime.io/advisories/CVE-2026-58063/https://agentprime.io/advisories/CVE-2026-58063/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:29:09 GMTCVECVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-inhttps://agentprime.io/advisories/CVE-2026-59638/https://agentprime.io/advisories/CVE-2026-59638/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:57:31 GMTCVEcriticalCVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signershttps://agentprime.io/advisories/CVE-2026-59639/https://agentprime.io/advisories/CVE-2026-59639/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:56:24 GMTCVECVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key pathshttps://agentprime.io/advisories/CVE-2026-59640/https://agentprime.io/advisories/CVE-2026-59640/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:55:19 GMTCVECVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validationhttps://agentprime.io/advisories/CVE-2026-59641/https://agentprime.io/advisories/CVE-2026-59641/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:54:21 GMTCVECVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs presenthttps://agentprime.io/advisories/CVE-2026-59642/https://agentprime.io/advisories/CVE-2026-59642/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:53:28 GMTCVECVE-2026-59643: OpenPGP inline-signature policy failures silently ignoredhttps://agentprime.io/advisories/CVE-2026-59643/https://agentprime.io/advisories/CVE-2026-59643/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:51:55 GMTCVECVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schemahttps://agentprime.io/advisories/CVE-2026-59645/https://agentprime.io/advisories/CVE-2026-59645/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:49:41 GMTCVECVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit lengthhttps://agentprime.io/advisories/CVE-2026-59646/https://agentprime.io/advisories/CVE-2026-59646/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:48:29 GMTCVECVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration counthttps://agentprime.io/advisories/CVE-2026-59647/https://agentprime.io/advisories/CVE-2026-59647/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:46:57 GMTCVECVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passeshttps://agentprime.io/advisories/CVE-2026-59648/https://agentprime.io/advisories/CVE-2026-59648/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:45:34 GMTCVECVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memoryhttps://agentprime.io/advisories/CVE-2026-59649/https://agentprime.io/advisories/CVE-2026-59649/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:44:24 GMTCVECVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputhttps://agentprime.io/advisories/CVE-2026-15055/https://agentprime.io/advisories/CVE-2026-15055/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:32:51 GMTCVE