Vulnerability in Legion Of The Bouncy Castle Inc. Bc-fja
CVE-2026-13505
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD…
Affected products
- Legion Of The Bouncy Castle Inc. Bc-fja — versions 1.0.0, 2.0.0, 2.1.0
Weakness classification (CWE)
References
- 91579145-5d7b-4cc5-b925-a0262ff19630 (vendor-advisory)