Maven/org.bouncycastle:bcprov-jdk18on CVE-2026-0636: medium 6.5, EPSS 0.53%
Bouncy Castle has an LDAP injection
Action: Upgrade org.bouncycastle:bcprov-jdk18on to 1.84 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.74 | 1.84 | - |
Fixed versions
| 1.84 |
Sources
- osv: GHSA-c3fc-8qff-9hwx#Maven/org.bouncycastle:bcprov-jdk18on
- nvd: CVE-2026-0636
- https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636
CVE-2026-0636 · published · modified · JSON