https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T03:00:24.649177+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/ghsa-m44j-cfrm-g8qc GHSA-m44j-cfrm-g8qc — Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 2026-10-08T03:00:24.652030+00:00

Affected: Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bctls-jdk18on, Maven: org.bouncycastle:bctls-jdk14, Maven: org.bouncycastle:bctls-jdk15to18, NuGet: BouncyCastle, NuGet: BouncyCastle.Cryptography

An issue was discovered in Bouncy Castle Java Cryptography APIs starting in 1.73 and before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.