Threats affecting pkg:github/bcutil-lts8on

CVE-2026-59645 is a high-severity vulnerability in Bouncy Castle for Java (BC-JAVA) affecting versions before 1.85 and certain LTS and FIPS versions. The issue involves the OER parser performing uncontrolled recursion without a depth limit on a self-referential IEEE 1609.2 schema, potentially leading to resource exhaustion or denial of service.