Maven/org.bouncycastle:bcpkix-jdk14 CVE-2026-5588: medium, EPSS 0.78%
Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules
Action: Upgrade org.bouncycastle:bcpkix-jdk14 to 1.84 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.49 | 1.84 | - |
Fixed versions
| 1.84 |
Sources
- osv: GHSA-wg6q-6289-32hp#Maven/org.bouncycastle:bcpkix-jdk14
- https://nvd.nist.gov/vuln/detail/CVE-2026-5588
- https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
CVE-2026-5588 · published · modified · JSON