https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-14682.htmlhttps://patchthecve.com/cve/CVE-2026-14682.htmlFri, 28 Aug 2026 16:44:47 +0000HIGH 7.5: In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X shttps://patchthecve.com/cve/CVE-2026-59646.htmlhttps://patchthecve.com/cve/CVE-2026-59646.htmlFri, 28 Aug 2026 19:57:57 +0000HIGH 7.5: In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.https://patchthecve.com/cve/CVE-2026-59638.htmlhttps://patchthecve.com/cve/CVE-2026-59638.htmlFri, 28 Aug 2026 17:29:17 +0000MEDIUM 6.5: In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.2