Threats affecting pkg:maven/org.bouncycastle/bcpg-fips

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.2%	CVE-2026-12817bcpg-fips · In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data High8.7EPSS 0.2%2026-08-03GCVE DatabaseCVE-2026-12817 In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series). EPSS 0.2%Report on CVE-2026-12817 Vulnerability CWE-354 #ghsa-9q38-7pr7-8j6w	GCVE Database	2026-08-03

Page 1 of 1