Maven/org.bouncycastle:bcpg-jdk15to18 CVE-2026-3505: high 7.5, EPSS 0.79%
Bouncy Castle Uncontrolled Resource Consumption vulnerability
Action: Upgrade org.bouncycastle:bcpg-jdk15to18 to 1.84 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.84 | - |
Fixed versions
| 1.84 |
Sources
- osv: GHSA-cj8j-37rh-8475#Maven/org.bouncycastle:bcpg-jdk15to18
- nvd: CVE-2026-3505
- https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505
CVE-2026-3505 · published · modified · JSON