diff --git a/advisories/github-reviewed/2026/05/GHSA-mx76-r943-rf8g/GHSA-mx76-r943-rf8g.json b/advisories/github-reviewed/2026/05/GHSA-mx76-r943-rf8g/GHSA-mx76-r943-rf8g.json index 468b5c2deb5c6..ab5b1e85d5da1 100644 --- a/advisories/github-reviewed/2026/05/GHSA-mx76-r943-rf8g/GHSA-mx76-r943-rf8g.json +++ b/advisories/github-reviewed/2026/05/GHSA-mx76-r943-rf8g/GHSA-mx76-r943-rf8g.json @@ -1,38 +1,41 @@ { "schema_version": "1.4.0", "id": "GHSA-mx76-r943-rf8g", - "modified": "2026-05-19T16:09:20Z", + "modified": "2026-05-19T16:09:21Z", "published": "2026-05-08T09:31:30Z", "aliases": [ "CVE-2026-8149" ], "summary": "Bouncy Castle has a vulnerability in program files gcm128w, gcm512w", - "details": "A vulnerability in Legion of the Bouncy Castle Inc. BC-FJA BC-FIPS on Linux, X86_64, AVX, AVX-512f.\n\nThis vulnerability is associated with program files gcm128w, gcm512w.\n\nThis issue affects BC-FJA: from 2.1.0 through 2.1.2.", + "details": "A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS on Linux, X86_64, AVX, AVX-512f.\n\nThis vulnerability is associated with program files gcm128w, gcm512w.\n\nThis issue affects BC-LTS: from 2.73.0 before 2.73.11", "severity": [ { "type": "CVSS_V4", - "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:X/RE:M/U:Amber" + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N" } ], "affected": [ { "package": { "ecosystem": "Maven", - "name": "org.bouncycastle:bc-fips" + "name": "org.bouncycastle:bctls-lts8on" }, "ranges": [ { "type": "ECOSYSTEM", "events": [ { - "introduced": "2.1.0" + "introduced": "2.73.0" }, { - "last_affected": "2.1.2" + "fixed": "2.73.11" } ] } - ] + ], + "database_specific": { + "last_known_affected_version_range": "<= 2.73.10" + } } ], "references": [