Maven/org.bouncycastle:bcpg-jdk16 CVE-2026-3505: high, EPSS 0.88%
Bouncy Castle Uncontrolled Resource Consumption vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.46 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-cj8j-37rh-8475#Maven/org.bouncycastle:bcpg-jdk16
- https://nvd.nist.gov/vuln/detail/CVE-2026-3505
- https://github.com/bcgit/bc-java/commit/dc7530939ffb6cdb57636f3609d98e23b94e71c1
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505
CVE-2026-3505 · published · modified · JSON