Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound
Maven org.bouncycastle:bc-fips · Upgrade to 2.1.3 or later · >= 2.1.0, < 2.1.3 · CVE-2026-8798 · GHSA-v6w3-qrh8-qccc · amended
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–2 of 2 matching · newest first
Maven org.bouncycastle:bc-fips · Upgrade to 2.1.3 or later · >= 2.1.0, < 2.1.3 · CVE-2026-8798 · GHSA-v6w3-qrh8-qccc · amended
Maven org.bouncycastle:bc-fips · Upgrade to 2.1.3, 2.0.2 or 1.0.2.7 by release line · < 1.0.2.7; >= 2.0.0, < 2.0.2; >= 2.1.0, < 2.1.3 · CVE-2026-13505 · GHSA-98j2-6v39-78w8 · amended
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.