https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-02T22:46:55.111202+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-58063 CVE-2026-58063 — BCFKS keystore load honours unbounded KDF cost from untrusted file 2026-10-02T22:46:55.121301+00:00

Affected: Legion of the Bouncy Castle Inc. BC-JAVA, Legion of the Bouncy Castle Inc. BC-LTS-JAVA, Legion of the Bouncy Castle Inc. BC-FJA

In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).