Maven/org.bouncycastle:bcprov-jdk15to18 CVE-2026-5598: high, EPSS 0.90%
Bouncy Castle Has Covert Timing Channel Vulnerability
Action: Upgrade org.bouncycastle:bcprov-jdk15to18 to 1.80.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.71 | 1.80.2 | - |
Fixed versions
| 1.80.2 |
Sources
- osv: GHSA-p93r-85wp-75v3
- https://nvd.nist.gov/vuln/detail/CVE-2026-5598
- https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
- https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
- https://github.com/bcgit/bc-java/wiki/CVE-2026-5598
CVE-2026-5598 · published · modified · JSON