Medium severityNVD Advisory· Published May 8, 2026· Updated Jul 21, 2026
CVE-2026-8149
CVE-2026-8149
Description
A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X86_64, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X86_64, AVX, AVX-512f.
This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C.
This issue affects BC-LTS: from 2.73.0 before 2.73.11; BC-FJA: from 2.1.0 before 2.1.3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.bouncycastle:bcprov-lts8onMaven | >= 2.73.0, < 2.73.11 | 2.73.11 |
Affected products
24(expand)+ 1 more
- (no CPE)
- (no CPE)range: from 2.73.0 before 2.73.11, from 2.1.0 before 2.1.3
- Range: from 2.73.0 before 2.73.11
- Range: from 2.1.0 before 2.1.3
- osv-coords20 versionspkg:apk/chainguard/bouncycastle-fipspkg:apk/chainguard/geoserver-3.0pkg:apk/chainguard/guacamole-client-extensionspkg:apk/chainguard/keycloak-fips-26.6pkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fipspkg:apk/chainguard/opensearch-2pkg:apk/chainguard/opensearch-2-ml-commonspkg:apk/chainguard/opensearch-3pkg:apk/chainguard/opensearch-3-ml-commonspkg:apk/chainguard/opensearch-3-performance-analyzerpkg:apk/chainguard/opensearch-3-securitypkg:apk/chainguard/opensearch-3-sqlpkg:apk/chainguard/wazuh-indexerpkg:apk/chainguard/wazuh-indexer-plugin-ml-commonspkg:apk/wolfi/opensearch-2pkg:apk/wolfi/opensearch-3pkg:apk/wolfi/opensearch-3-ml-commonspkg:apk/wolfi/opensearch-3-performance-analyzerpkg:apk/wolfi/opensearch-3-securitypkg:apk/wolfi/opensearch-3-sql
< 2.1.3-r0+ 19 more
- (no CPE)range: < 2.1.3-r0
- (no CPE)range: < 3.0.0-r3
- (no CPE)range: < 1.6.0-r10
- (no CPE)range: < 26.6.4-r2
- (no CPE)range: < 26.6.4-r2
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 3.7.0-r1
- (no CPE)range: < 3.7.0-r2
- (no CPE)range: < 3.7.0-r1
- (no CPE)range: < 3.7.0-r2
- (no CPE)range: < 3.7.0-r2
- (no CPE)range: < 4.14.6-r0
- (no CPE)range: < 4.14.6-r0
- (no CPE)range: < 2.19.6-r0
- (no CPE)range: < 3.7.0-r1
- (no CPE)range: < 3.7.0-r2
- (no CPE)range: < 3.7.0-r1
- (no CPE)range: < 3.7.0-r2
- (no CPE)range: < 3.7.0-r2
Patches
Vulnerability mechanics
References
2- github.com/advisories/GHSA-mx76-r943-rf8gghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-8149ghsaADVISORY
News mentions
0No linked articles in our index yet.