tocsin

CVE-2026-3505

7 advisories.

Maven/org.bouncycastle:bcpg-jdk12 CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-130

Fixed versions

No fixed version in the source.

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk14 CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: Upgrade org.bouncycastle:bcpg-jdk14 to 1.84 or later.

Affected

introducedfixedlast affected
01.84-

Fixed versions

1.84

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk15 CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.46

Fixed versions

No fixed version in the source.

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk15to18 CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: Upgrade org.bouncycastle:bcpg-jdk15to18 to 1.84 or later.

Affected

introducedfixedlast affected
01.84-

Fixed versions

1.84

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk15on CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.70

Fixed versions

No fixed version in the source.

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk16 CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-1.46

Fixed versions

No fixed version in the source.

Sources

CVE-2026-3505 · published · modified · JSON

Maven/org.bouncycastle:bcpg-jdk18on CVE-2026-3505: high

Bouncy Castle Uncontrolled Resource Consumption vulnerability

Action: Upgrade org.bouncycastle:bcpg-jdk18on to 1.84 or later.

Affected

introducedfixedlast affected
01.84-

Fixed versions

1.84

Sources

CVE-2026-3505 · published · modified · JSON