Maven/org.bouncycastle:bcprov-jdk15to18 CVE-2026-0636: medium 6.5, EPSS 0.53%
Bouncy Castle has an LDAP injection
Action: Upgrade org.bouncycastle:bcprov-jdk15to18 to 1.80.2 (1.80.x), 1.81.1 (1.81.x) or 1.84 (1.84.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.74 | 1.80.2 | - |
| 1.81 | 1.81.1 | - |
| 1.82 | 1.84 | - |
Fixed versions
| 1.80.2 | 1.81.1 | 1.84 |
Sources
- osv: GHSA-c3fc-8qff-9hwx#Maven/org.bouncycastle:bcprov-jdk15to18
- nvd: CVE-2026-0636
- https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
- https://access.redhat.com/errata/RHSA-2026:11720
- https://access.redhat.com/errata/RHSA-2026:60248
- https://access.redhat.com/errata/RHSA-2026:60249
- https://access.redhat.com/errata/RHSA-2026:60250
- https://access.redhat.com/errata/RHSA-2026:60251
- https://access.redhat.com/errata/RHSA-2026:60252
- https://access.redhat.com/errata/RHSA-2026:60254
- https://access.redhat.com/errata/RHSA-2026:60256
- https://access.redhat.com/errata/RHSA-2026:60259
- https://access.redhat.com/errata/RHSA-2026:66488
- https://access.redhat.com/security/cve/CVE-2026-0636
- https://bugzilla.redhat.com/show_bug.cgi?id=2458641
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0636.json
- https://access.redhat.com/errata/RHSA-2026:11721
- https://access.redhat.com/errata/RHSA-2026:13631
- https://access.redhat.com/errata/RHSA-2026:14272
- https://access.redhat.com/errata/RHSA-2026:14276
- https://access.redhat.com/errata/RHSA-2026:17668
- https://access.redhat.com/errata/RHSA-2026:18054
- https://access.redhat.com/errata/RHSA-2026:18055
- https://access.redhat.com/errata/RHSA-2026:18059
- https://access.redhat.com/errata/RHSA-2026:21772
- https://access.redhat.com/errata/RHSA-2026:53644
- https://access.redhat.com/errata/RHSA-2026:53645
- https://access.redhat.com/errata/RHSA-2026:53646
- https://access.redhat.com/errata/RHSA-2026:53806
- https://access.redhat.com/errata/RHSA-2026:60239
- https://access.redhat.com/errata/RHSA-2026:60246
- https://access.redhat.com/errata/RHSA-2026:60247
CVE-2026-0636 · published · modified · JSON