OSV security advisoryHigh
High advisory for org
ROOT-APP-MAVEN-CVE-2026-13505 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
orgJava ecosystem
Advisory overview
Root has patched CVE-2026-13505 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available.
Affected packages and releases
Root:Maven / org.bouncycastle:bc-fips
introduced: 0 · fixed: 1.0.2.5-aikido.9307 · fixed: 1.0.2.6-aikido.1 · fixed: 2.1.2-aikido.1 · fixed: 2.1.2-aikido.2
Root:Maven / io.root.org.bouncycastle:bc-fips
introduced: 0 · fixed: 1.0.2.5-root.io.9307 · fixed: 1.0.2.6-root.io.1 · fixed: 2.1.2-root.io.1 · fixed: 2.1.2-root.io.2