Threats tagged 'ghsa-9pwp-9qqc-pr26'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-8763Bouncy Castle · Name Constraints bypass via trailing dot in rfc822Name and URI Critical9.3EPSS 0.4%2026-08-03GCVE DatabaseCVE-2026-8763 CVE-2026-8763 is a critical vulnerability in Bouncy Castle for Java before versions 1.85, 2.73.12, and specific FIPS releases. It allows bypassing Name Constraints validation via a trailing dot in rfc822Name and URI fields. This flaw affects multiple Bouncy Castle Java variants and has a high CVSS score of 9.1, indicating severe impact on confidentiality and integrity without requiring privileges or user interaction. EPSS 0.4%Report on CVE-2026-8763 Vulnerability CWE-295 #ghsa-9pwp-9qqc-pr26 #maven	GCVE Database	2026-08-03

Page 1 of 1