agentprime: legion-of-the-bouncy-castle-inc-bc-lts-javaEvery new CVE for legion-of-the-bouncy-castle-inc-bc-lts-java.https://agentprime.io/CVE-2026-71884: Packet CTR reports a full success length after the counter is exhaustedhttps://agentprime.io/advisories/CVE-2026-71884/https://agentprime.io/advisories/CVE-2026-71884/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 09:30:50 GMTCVECVE-2026-71883: Native AES packet cipher returns the raw AES key on an aliashttps://agentprime.io/advisories/CVE-2026-71883/https://agentprime.io/advisories/CVE-2026-71883/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:38:18 GMTCVECVE-2026-71888: CMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absenthttps://agentprime.io/advisories/CVE-2026-71888/https://agentprime.io/advisories/CVE-2026-71888/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:36:12 GMTCVECVE-2026-71889: PKIXCertPathReviewer does not apply X.509 name constraints to the target certificatehttps://agentprime.io/advisories/CVE-2026-71889/https://agentprime.io/advisories/CVE-2026-71889/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:31:01 GMTCVECVE-2026-85515: OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity checkhttps://agentprime.io/advisories/CVE-2026-85515/https://agentprime.io/advisories/CVE-2026-85515/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:05:16 GMTCVECVE-2026-97873: Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA providerhttps://agentprime.io/advisories/CVE-2026-97873/https://agentprime.io/advisories/CVE-2026-97873/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 08:04:43 GMTCVECVE-2026-17508: Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry pointshttps://agentprime.io/advisories/CVE-2026-17508/https://agentprime.io/advisories/CVE-2026-17508/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:27:59 GMTCVECVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)https://agentprime.io/advisories/CVE-2026-13586/https://agentprime.io/advisories/CVE-2026-13586/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:58:00 GMTCVECVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted pathhttps://agentprime.io/advisories/CVE-2026-12860/https://agentprime.io/advisories/CVE-2026-12860/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:55:58 GMTCVECVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned datahttps://agentprime.io/advisories/CVE-2026-12817/https://agentprime.io/advisories/CVE-2026-12817/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:54:16 GMTCVECVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF splithttps://agentprime.io/advisories/CVE-2026-12816/https://agentprime.io/advisories/CVE-2026-12816/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:53:32 GMTCVECVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)https://agentprime.io/advisories/CVE-2026-12803/https://agentprime.io/advisories/CVE-2026-12803/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:52:20 GMTCVECVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryptionhttps://agentprime.io/advisories/CVE-2026-12802/https://agentprime.io/advisories/CVE-2026-12802/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:48:42 GMTCVECVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length readhttps://agentprime.io/advisories/CVE-2026-14682/https://agentprime.io/advisories/CVE-2026-14682/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:44:13 GMTCVECVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished nameshttps://agentprime.io/advisories/CVE-2026-58059/https://agentprime.io/advisories/CVE-2026-58059/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:41:30 GMTCVECVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verifyhttps://agentprime.io/advisories/CVE-2026-58060/https://agentprime.io/advisories/CVE-2026-58060/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:37:43 GMTCVECVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag checkhttps://agentprime.io/advisories/CVE-2026-58061/https://agentprime.io/advisories/CVE-2026-58061/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:36:36 GMTCVECVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificatehttps://agentprime.io/advisories/CVE-2026-58062/https://agentprime.io/advisories/CVE-2026-58062/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:35:28 GMTCVEcriticalCVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted filehttps://agentprime.io/advisories/CVE-2026-58063/https://agentprime.io/advisories/CVE-2026-58063/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 02:29:09 GMTCVECVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-inhttps://agentprime.io/advisories/CVE-2026-59638/https://agentprime.io/advisories/CVE-2026-59638/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:57:31 GMTCVEcriticalCVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signershttps://agentprime.io/advisories/CVE-2026-59639/https://agentprime.io/advisories/CVE-2026-59639/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:56:24 GMTCVECVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key pathshttps://agentprime.io/advisories/CVE-2026-59640/https://agentprime.io/advisories/CVE-2026-59640/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:55:19 GMTCVECVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validationhttps://agentprime.io/advisories/CVE-2026-59641/https://agentprime.io/advisories/CVE-2026-59641/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:54:21 GMTCVECVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs presenthttps://agentprime.io/advisories/CVE-2026-59642/https://agentprime.io/advisories/CVE-2026-59642/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:53:28 GMTCVECVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schemahttps://agentprime.io/advisories/CVE-2026-59645/https://agentprime.io/advisories/CVE-2026-59645/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:49:41 GMTCVECVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit lengthhttps://agentprime.io/advisories/CVE-2026-59646/https://agentprime.io/advisories/CVE-2026-59646/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:48:29 GMTCVECVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration counthttps://agentprime.io/advisories/CVE-2026-59647/https://agentprime.io/advisories/CVE-2026-59647/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:46:57 GMTCVECVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passeshttps://agentprime.io/advisories/CVE-2026-59648/https://agentprime.io/advisories/CVE-2026-59648/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:45:34 GMTCVECVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memoryhttps://agentprime.io/advisories/CVE-2026-59649/https://agentprime.io/advisories/CVE-2026-59649/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:44:24 GMTCVECVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer valuehttps://agentprime.io/advisories/CVE-2026-59650/https://agentprime.io/advisories/CVE-2026-59650/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:42:46 GMTCVEcriticalCVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC keyhttps://agentprime.io/advisories/CVE-2026-59651/https://agentprime.io/advisories/CVE-2026-59651/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:41:23 GMTCVECVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity checkhttps://agentprime.io/advisories/CVE-2026-12185/https://agentprime.io/advisories/CVE-2026-12185/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:38:01 GMTCVECVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from inputhttps://agentprime.io/advisories/CVE-2026-15055/https://agentprime.io/advisories/CVE-2026-15055/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:32:51 GMTCVE