WhisperX tag archive

#BC-JAVA

This page collects WhisperX intelligence signals tagged #BC-JAVA. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-05-04 09:54:12 · GitHub Issues

1. Bouncy Castle BC-JAVA Hit by Critical LDAP Injection Vulnerability CVE-2026-0636 Affecting Millions of Deployments

A critical LDAP injection vulnerability has been identified in the Legion of the Bouncy Castle Inc. BC-JAVA cryptographic library, potentially exposing countless applications that rely on the widely-used open-source security toolkit. The flaw, tracked as CVE-2026-0636 and classified under CWE-90, specifically targets t...

The Lab · 2026-05-04 09:54:13 · GitHub Issues

2. Bouncy Castle BC-JAVA CVE-2026-5588: PKIX CompositeVerifier Validates Empty Signature Sequences

A critical cryptographic vulnerability in the Bouncy Castle BC-JAVA library allows empty signature sequences to pass verification checks under certain PKIX configurations. The flaw, tracked as CVE-2026-5588 and classified under CWE-327 (Use of Broken or Risky Cryptographic Algorithm), affects the bcpkix module across m...