Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-58059 Quadratic-Time Escaping Vulnerability in Bouncy Castle for Java Before 1.85 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-58059
Post summary
The entry introduces CVE-2026-58059, highlighting a quadratic‑time escaping flaw in Bouncy Castle Java libraries before version 1.85, and directs readers to a vulnerability detail page.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | bouncycastle | bc-java | - | - | - |
| App | bouncycastle | bouncy_castle_for_java_lts | - | - | - |
| App | bouncycastle | fips_java_api | - | - | - |