Vulnerabilidades do Bouncycastle Bcmail-fips
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Bouncycastle Bcmail-fips: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:bouncycastle:bcmail-fips
CVE-2026-59641
Média · 5.3
CWE-345 02/08/2026
S/MIME validator trusts signer-asserted signingTime for path validation
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).