Maven/org.bouncycastle:bcprov-jdk14 CVE-2026-5598: high 7.5, EPSS 0.90%
Bouncy Castle Has Covert Timing Channel Vulnerability
Action: Upgrade org.bouncycastle:bcprov-jdk14 to 1.81.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.81 | 1.81.1 | - |
Fixed versions
| 1.81.1 |
Sources
- osv: GHSA-p93r-85wp-75v3#Maven/org.bouncycastle:bcprov-jdk14
- nvd: CVE-2026-5598
- https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
- https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
- https://github.com/bcgit/bc-java/wiki/CVE-2026-5598
CVE-2026-5598 · published · modified · JSON