Vulnerability/
https://seclists.org/oss-sec/2026/q3/437

https://seclists.org/oss-sec/2026/q3/437: Bouncy Castle 1.85 lease fixes 32 CVEs

Published Aug 5, 2026

Updated

Affected Software

1 affected component

Bouncy Castle Bouncy Castle Java=1.85

Frequently Asked Questions

Is there a project-provided explanation of how these issues were identified?

The project owner reportedly shared the background in Bouncy Castle's GitHub discussion 2388. The mailing-list post does not describe the discovery method itself.

Where can I find details about individual issues in the release?

The Bouncy Castle project wiki provides additional information for individual CVEs; the post cites CVE-2026-8763 as an example. The mailing-list post does not include technical details for the full set.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.