GHSA-9pwp-9qqc-pr26

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber CVSS Calculator

Summary

Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI

Details

In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

Database specific

{
    "cwe_ids":  [
        "CWE-295"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-09-18T17:35:38Z",
    "nvd_published_at":  "2026-08-03T01:16:45Z",
    "severity":  "CRITICAL"
}

References

Affected packages

Maven

org.bouncycastle:bc-fips

Package

Name: org.bouncycastle:bc-fips; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bc-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.0.2.7

Affected versions

1.*

1.0.0

1.0.1

1.0.2

1.0.2.1

1.0.2.3

1.0.2.4

1.0.2.5

1.0.2.6

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"

org.bouncycastle:bc-fips

Package

Name: org.bouncycastle:bc-fips; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bc-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

2.0.0

Fixed

2.0.2

Affected versions

2.*

2.0.0

2.0.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"

org.bouncycastle:bc-fips

Package

Name: org.bouncycastle:bc-fips; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bc-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

2.1.0

Fixed

2.1.3

Affected versions

2.*

2.1.0

2.1.1

2.1.2

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"

org.bouncycastle:bcprov-jdk18on

Package

Name: org.bouncycastle:bcprov-jdk18on; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bcprov-jdk18on

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.85

Affected versions

1.*

1.71

1.71.1

1.72

1.73

1.74

1.75

1.76

1.77

1.78

1.78.1

1.79

1.80

1.80.2

1.81

1.81.1

1.82

1.83

1.84

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"

org.bouncycastle:bcprov-lts8on

Package

Name: org.bouncycastle:bcprov-lts8on; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bcprov-lts8on

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.73.12

Affected versions

2.*

2.73.0

2.73.1

2.73.2

2.73.3

2.73.4

2.73.5

2.73.6

2.73.7

2.73.8

2.73.9

2.73.10

2.73.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"

org.bouncycastle:bcprov-jdk15to18

Package

Name: org.bouncycastle:bcprov-jdk15to18; View open source insights on deps.dev
Purl: pkg:maven/org.bouncycastle/bcprov-jdk15to18

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.85

Affected versions

1.*

1.63

1.64

1.65

1.66

1.67

1.68

1.69

1.70

1.71

1.72

1.73

1.74

1.75

1.76

1.77

1.78

1.78.1

1.79

1.80

1.81

1.82

1.83

1.84

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-9pwp-9qqc-pr26/GHSA-9pwp-9qqc-pr26.json"