Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j295-77c3-9frf

Опубликовано: 03 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

EPSS

Процентиль: 10%
0.00203
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-295

Связанные уязвимости

ubuntu
3 дня назад

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

nvd
4 дня назад

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).

debian
4 дня назад

In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted ...

EPSS

Процентиль: 10%
0.00203
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-295