Threats tagged 'ghsa-3q78-fqj5-g3mc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.6%	CVE-2026-58060Bouncycastle · In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify High8.7EPSS 0.6%2026-08-03GCVE DatabaseCVE-2026-58060 Bouncy Castle for Java versions before 1.85 have an unbounded HSS public-key level count, which can lead to excessive memory allocation during verification. This vulnerability also affects Bouncy Castle for Java LTS versions before 2.73.12 and Bouncy Castle for Java FIPS versions before 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). EPSS 0.6%Report on CVE-2026-58060 Vulnerability CWE-789 #ghsa-3q78-fqj5-g3mc	GCVE Database	2026-08-03

Page 1 of 1