CVE-2026-8149
1 advisory.
Maven/org.bouncycastle:bcprov-lts8on CVE-2026-8149: medium
Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption
Action: Upgrade org.bouncycastle:bcprov-lts8on to 2.73.11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.73.0 | 2.73.11 | - |
Fixed versions
| 2.73.11 |
Sources
- osv: GHSA-mx76-r943-rf8g
- https://nvd.nist.gov/vuln/detail/CVE-2026-8149
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908149
CVE-2026-8149 · published · modified · JSON