Legion of the Bouncy Castle Inc. BC-LTS
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-15997 | 2.73.0 – < 2.73.12.1 | Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state | LOW 1.7 | 0.1 % | ||
| CVE-2026-8149 | 2.73.0 – < 2.73.11 | GCM chunking can lead to bad tag exception on decryption | MEDIUM 5.1 | 0.2 % |