https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T20:34:19.173228+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-wg6q-6289-32hp GHSA-wg6q-6289-32hp — Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules 2026-11-14T20:34:19.405798+00:00

Affected: Maven: org.bouncycastle:bcpkix-jdk18on, Maven: org.bouncycastle:bcpkix-jdk15to18, Maven: org.bouncycastle:bcpkix-jdk15on, Maven: org.bouncycastle:bcpkix-jdk14, Maven: org.bouncycastle:bcpkix-debug-jdk18on, Maven: org.bouncycastle:bcpkix-debug-jdk15to18, Maven: org.bouncycastle:bcpkix-debug-jdk14

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules).

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

This issue affects BC-JAVA: from 1.49 before 1.84.