[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-0636":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":26,"downstream":27,"duplicates":38,"related":39,"reserved_at":9,"published_at":43,"modified_at":44,"state":45,"summary":46,"references_raw":55,"kevs":135,"epss":136,"epss_history":139,"metrics":383,"affected":399},"CVE-2026-0636","Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).\n\n This vulnerability is associated with program files LDAPStoreHelper.\n\n\n\nThis issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-90","Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-136","LDAP Injection",[],[],[25],"GHSA-c3fc-8qff-9hwx",[],[28,30,32,34,36],{"_key":29},"OPENSUSE-SU-2026:10571-1",{"_key":31},"DEBIAN-CVE-2026-0636",{"_key":33},"UBUNTU-CVE-2026-0636",{"_key":35},"RHSA-2026:18054",{"_key":37},"RHSA-2026:18055",[],[40,41],{"_key":29},{"_key":42},"CGA-JR9F-RHV2-8GRV","2026-04-15T08:59:12.677Z","2026-07-16T12:04:33.894Z","Awaiting Analysis",{"cisa_kev":47,"cisa_ransomware":47,"cisa_vendor":9,"epss_severity":48,"epss_score":49,"severity":50,"severity_score":51,"severity_version":52,"severity_source":53,"severity_vector":54,"severity_status":45},false,"low",0.00527,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",[56,64,69,74,79,85,90,95,99,103,107,111,115,119,123,127,131],{"url":57,"sources":58,"tags":61},"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636",[53,59,60],"nvd","osv_maven",[62,63],"Vendor Advisory","WEB",{"url":65,"sources":66,"tags":67},"https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde",[53,59,60],[68,63],"Patch",{"url":70,"sources":71,"tags":72},"https://nvd.nist.gov/vuln/detail/CVE-2026-0636",[60],[73],"Advisory",{"url":75,"sources":76,"tags":77},"https://github.com/bcgit/bc-java",[60],[78],"PACKAGE",{"url":80,"sources":81,"tags":82},"https://access.redhat.com/security/cve/CVE-2026-0636",[53],[83,84],"VDB Entry","X Refsource REDHAT",{"url":86,"sources":87,"tags":88},"https://bugzilla.redhat.com/show_bug.cgi?id=2458641",[53],[89,84],"Issue Tracking",{"url":91,"sources":92,"tags":93},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0636.json",[53],[94],"X Sadp Csaf Vex",{"url":96,"sources":97,"tags":98},"https://access.redhat.com/errata/RHSA-2026:18054",[53],[62,84],{"url":100,"sources":101,"tags":102},"https://access.redhat.com/errata/RHSA-2026:18055",[53],[62,84],{"url":104,"sources":105,"tags":106},"https://access.redhat.com/errata/RHSA-2026:14276",[53],[62,84],{"url":108,"sources":109,"tags":110},"https://access.redhat.com/errata/RHSA-2026:14272",[53],[62,84],{"url":112,"sources":113,"tags":114},"https://access.redhat.com/errata/RHSA-2026:13631",[53],[62,84],{"url":116,"sources":117,"tags":118},"https://access.redhat.com/errata/RHSA-2026:18059",[53],[62,84],{"url":120,"sources":121,"tags":122},"https://access.redhat.com/errata/RHSA-2026:21772",[53],[62,84],{"url":124,"sources":125,"tags":126},"https://access.redhat.com/errata/RHSA-2026:17668",[53],[62,84],{"url":128,"sources":129,"tags":130},"https://access.redhat.com/errata/RHSA-2026:11720",[53],[62,84],{"url":132,"sources":133,"tags":134},"https://access.redhat.com/errata/RHSA-2026:11721",[53],[62,84],[],{"date":137,"score":49,"percentile":138},"2026-07-05",0.40777,[140,144,147,150,152,155,158,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,212,215,218,221,223,226,230,233,236,240,243,246,249,252,255,258,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,313,315,318,321,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,382],{"date":141,"score":142,"percentile":143},"2026-04-15",0.00047,0.14398,{"date":145,"score":142,"percentile":146},"2026-04-16",0.14387,{"date":148,"score":142,"percentile":149},"2026-04-17",0.14389,{"date":151,"score":142,"percentile":149},"2026-04-18",{"date":153,"score":142,"percentile":154},"2026-04-19",0.1434,{"date":156,"score":142,"percentile":157},"2026-04-20",0.14322,{"date":159,"score":160,"percentile":161},"2026-04-21",0.00062,0.19255,{"date":163,"score":160,"percentile":164},"2026-04-22",0.19314,{"date":166,"score":160,"percentile":167},"2026-04-23",0.19331,{"date":169,"score":160,"percentile":170},"2026-04-24",0.19154,{"date":172,"score":160,"percentile":173},"2026-04-25",0.19163,{"date":175,"score":160,"percentile":176},"2026-04-26",0.19144,{"date":178,"score":160,"percentile":179},"2026-04-27",0.19134,{"date":181,"score":160,"percentile":182},"2026-04-28",0.19098,{"date":184,"score":160,"percentile":185},"2026-04-29",0.19103,{"date":187,"score":160,"percentile":188},"2026-04-30",0.19072,{"date":190,"score":160,"percentile":191},"2026-05-01",0.19057,{"date":193,"score":160,"percentile":194},"2026-05-02",0.19085,{"date":196,"score":160,"percentile":197},"2026-05-03",0.19056,{"date":199,"score":160,"percentile":200},"2026-05-04",0.19002,{"date":202,"score":160,"percentile":203},"2026-05-05",0.18994,{"date":205,"score":160,"percentile":206},"2026-05-06",0.18988,{"date":208,"score":160,"percentile":209},"2026-05-07",0.19075,{"date":211,"score":160,"percentile":185},"2026-05-08",{"date":213,"score":160,"percentile":214},"2026-05-09",0.1917,{"date":216,"score":160,"percentile":217},"2026-05-10",0.19157,{"date":219,"score":160,"percentile":220},"2026-05-11",0.19133,{"date":222,"score":160,"percentile":214},"2026-05-12",{"date":224,"score":160,"percentile":225},"2026-05-13",0.19223,{"date":227,"score":228,"percentile":229},"2026-05-14",0.0002,0.05659,{"date":231,"score":228,"percentile":232},"2026-05-15",0.05661,{"date":234,"score":228,"percentile":235},"2026-05-16",0.05673,{"date":237,"score":238,"percentile":239},"2026-05-17",0.00022,0.06237,{"date":241,"score":238,"percentile":242},"2026-05-18",0.06201,{"date":244,"score":238,"percentile":245},"2026-05-19",0.06179,{"date":247,"score":238,"percentile":248},"2026-05-20",0.06143,{"date":250,"score":238,"percentile":251},"2026-05-21",0.06142,{"date":253,"score":238,"percentile":254},"2026-05-22",0.06374,{"date":256,"score":238,"percentile":257},"2026-05-23",0.06369,{"date":259,"score":238,"percentile":257},"2026-05-24",{"date":261,"score":238,"percentile":262},"2026-05-25",0.06348,{"date":264,"score":238,"percentile":265},"2026-05-26",0.06327,{"date":267,"score":238,"percentile":268},"2026-05-27",0.06363,{"date":270,"score":238,"percentile":271},"2026-05-28",0.06452,{"date":273,"score":238,"percentile":274},"2026-05-29",0.06469,{"date":276,"score":238,"percentile":277},"2026-05-30",0.06459,{"date":279,"score":238,"percentile":280},"2026-05-31",0.06445,{"date":282,"score":238,"percentile":283},"2026-06-01",0.0641,{"date":285,"score":238,"percentile":286},"2026-06-02",0.06334,{"date":288,"score":238,"percentile":289},"2026-06-03",0.06291,{"date":291,"score":238,"percentile":292},"2026-06-04",0.06302,{"date":294,"score":238,"percentile":295},"2026-06-05",0.0633,{"date":297,"score":238,"percentile":298},"2026-06-06",0.0632,{"date":300,"score":238,"percentile":301},"2026-06-07",0.06313,{"date":303,"score":238,"percentile":304},"2026-06-08",0.06268,{"date":306,"score":238,"percentile":307},"2026-06-09",0.0628,{"date":309,"score":238,"percentile":310},"2026-06-10",0.06311,{"date":312,"score":238,"percentile":301},"2026-06-11",{"date":314,"score":238,"percentile":286},"2026-06-12",{"date":316,"score":238,"percentile":317},"2026-06-13",0.06324,{"date":319,"score":238,"percentile":320},"2026-06-14",0.06304,{"date":322,"score":323,"percentile":324},"2026-06-15",0.00494,0.38303,{"date":326,"score":323,"percentile":327},"2026-06-16",0.38356,{"date":329,"score":323,"percentile":330},"2026-06-17",0.38419,{"date":332,"score":323,"percentile":333},"2026-06-18",0.38474,{"date":335,"score":323,"percentile":336},"2026-06-19",0.38463,{"date":338,"score":323,"percentile":339},"2026-06-20",0.38454,{"date":341,"score":323,"percentile":342},"2026-06-21",0.3844,{"date":344,"score":323,"percentile":345},"2026-06-22",0.38432,{"date":347,"score":323,"percentile":348},"2026-06-23",0.38509,{"date":350,"score":323,"percentile":351},"2026-06-24",0.38546,{"date":353,"score":323,"percentile":354},"2026-06-25",0.38626,{"date":356,"score":323,"percentile":357},"2026-06-26",0.3867,{"date":359,"score":323,"percentile":360},"2026-06-27",0.38714,{"date":362,"score":323,"percentile":363},"2026-06-28",0.38692,{"date":365,"score":323,"percentile":366},"2026-06-29",0.38695,{"date":368,"score":49,"percentile":369},"2026-06-30",0.40591,{"date":371,"score":49,"percentile":372},"2026-07-01",0.40687,{"date":374,"score":49,"percentile":375},"2026-07-02",0.40722,{"date":377,"score":49,"percentile":378},"2026-07-03",0.4074,{"date":380,"score":49,"percentile":381},"2026-07-04",0.40763,{"date":137,"score":49,"percentile":138},[384,392,395],{"source":53,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":385,"cvss_v4_0":389},{"baseScore":51,"baseSeverity":386,"vectorString":54,"impactScore":387,"exploitabilityScore":388},"MEDIUM",4.2,10,{"baseScore":390,"baseSeverity":386,"vectorString":391,"impactScore":9,"exploitabilityScore":9},5.5,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:A/RE:M/U:Amber",{"source":59,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":393},{"baseScore":390,"baseSeverity":386,"vectorString":394,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:X/RE:M/U:Amber",{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":396},{"baseScore":397,"baseSeverity":9,"vectorString":398,"impactScore":9,"exploitabilityScore":9},6.9,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/RE:M/U:Amber",[400,423,433,438],{"ecosystem":9,"name":401,"vendor":402,"product":403,"cpe_part":404,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":405},"BC-JAVA","legion of the bouncy castle inc.","bc-java","a",[406,413,416,420],{"version":407,"is_range":408,"range_type":53,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},">= 1.74, \u003C 1.84",true,"1.74","including","1.84","excluding",{"version":414,"is_range":408,"range_type":53,"version_start":409,"version_start_type":410,"version_end":415,"version_end_type":412,"fixed_in":9},">= 1.74, \u003C 1.80.2","1.80.2",{"version":417,"is_range":408,"range_type":53,"version_start":418,"version_start_type":410,"version_end":419,"version_end_type":412,"fixed_in":9},">= 1.81, \u003C 1.81.1","1.81","1.81.1",{"version":421,"is_range":408,"range_type":53,"version_start":422,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},">= 1.82, \u003C 1.84","1.82",{"ecosystem":424,"name":425,"vendor":426,"product":427,"cpe_part":9,"purl_type":428,"purl_namespace":426,"purl_name":427,"source":9,"versions":429},"Maven","org.bouncycastle:bcprov-jdk14","org.bouncycastle","bcprov-jdk14","maven",[430],{"version":431,"is_range":408,"range_type":432,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},"gte1_74_lt1_84","ecosystem",{"ecosystem":424,"name":434,"vendor":426,"product":435,"cpe_part":9,"purl_type":428,"purl_namespace":426,"purl_name":435,"source":9,"versions":436},"org.bouncycastle:bcprov-jdk15to18","bcprov-jdk15to18",[437],{"version":431,"is_range":408,"range_type":432,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},{"ecosystem":424,"name":439,"vendor":426,"product":440,"cpe_part":9,"purl_type":428,"purl_namespace":426,"purl_name":440,"source":9,"versions":441},"org.bouncycastle:bcprov-jdk18on","bcprov-jdk18on",[442],{"version":431,"is_range":408,"range_type":432,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9}]