Skip to content

org.bouncycastle:bcpkix-jdk15on vulnerabilities (Maven)

2 vulnerabilities.

org.bouncycastle:bcpkix-jdk15on MavenPKIX draft CompositeVerifier accepts empty signature sequence as valid.CVE-2026-5588Fix available6.3 MediumApril 15, 2026
org.bouncycastle:bcpkix-jdk15on MavenPossible DOS in processing large name constraint structures in PKIXCertPathReveiwerCVE-2025-8916Fix available6.3 MediumAugust 13, 2025