Debian/bouncycastle: unknown

In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathReviewer - applied X.50

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-71889#Debian:13/bouncycastle
https://security-tracker.debian.org/tracker/CVE-2026-71889

published 2026-10-03T09:17:05.437Z · modified 2026-10-07T09:47:34.873090980Z · JSON