Bouncycastle Bcjmail-fips — known CVE vulnerabilities

Every CVE whose affected-product data names Bouncycastle Bcjmail-fips, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-59641 — CVSS 5.3 (medium): In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects…