[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-5598":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":41,"related":42,"reserved_at":9,"published_at":46,"modified_at":47,"state":48,"summary":49,"references_raw":58,"kevs":130,"epss":131,"epss_history":134,"metrics":384,"affected":399},"CVE-2026-5598","Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\n\n This vulnerability is associated with program files FrodoEngine.Java.\n\n\n\nThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-385","Covert Timing Channel","Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.","weakness","Incomplete","Base","Medium",[20],{"id":21,"name":22,"techniques":23},"CAPEC-462","Cross-Domain Search Timing",[],[],[26],"GHSA-p93r-85wp-75v3",[],[29,31,33,35,37,39],{"_key":30},"OPENSUSE-SU-2026:10571-1",{"_key":32},"DEBIAN-CVE-2026-5598",{"_key":34},"RHSA-2026:12267",{"_key":36},"UBUNTU-CVE-2026-5598",{"_key":38},"RHSA-2026:18054",{"_key":40},"RHSA-2026:18055",[],[43,44],{"_key":30},{"_key":45},"CGA-VGFM-4X3C-36FM","2026-04-15T09:05:56.277Z","2026-07-15T00:43:01.575Z","Awaiting Analysis",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":51,"epss_score":52,"severity":53,"severity_score":54,"severity_version":55,"severity_source":56,"severity_vector":57,"severity_status":48},false,"low",0.00691,"high",8.9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red",[59,65,72,76,80,85,90,94,100,105,110,114,118,122,126],{"url":60,"sources":61,"tags":63},"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905998",[56,62],"nvd",[64],"Vendor Advisory",{"url":66,"sources":67,"tags":69},"https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87",[56,62,68],"osv_maven",[70,71],"Patch","WEB",{"url":73,"sources":74,"tags":75},"https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5",[56,62,68],[70,71],{"url":77,"sources":78,"tags":79},"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598",[56,62,68],[64,71],{"url":81,"sources":82,"tags":83},"https://nvd.nist.gov/vuln/detail/CVE-2026-5598",[68],[84],"Advisory",{"url":86,"sources":87,"tags":88},"https://github.com/bcgit/bc-java",[68],[89],"PACKAGE",{"url":91,"sources":92,"tags":93},"https://github.com/bcgit/bc-java/wiki/CVE-2026-5598",[68],[71],{"url":95,"sources":96,"tags":97},"https://access.redhat.com/security/cve/CVE-2026-5598",[56],[98,99],"VDB Entry","X Refsource REDHAT",{"url":101,"sources":102,"tags":103},"https://bugzilla.redhat.com/show_bug.cgi?id=2458635",[56],[104,99],"Issue Tracking",{"url":106,"sources":107,"tags":108},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json",[56],[109],"X Sadp Csaf Vex",{"url":111,"sources":112,"tags":113},"https://access.redhat.com/errata/RHSA-2026:12267",[56],[64,99],{"url":115,"sources":116,"tags":117},"https://access.redhat.com/errata/RHSA-2026:18054",[56],[64,99],{"url":119,"sources":120,"tags":121},"https://access.redhat.com/errata/RHSA-2026:18055",[56],[64,99],{"url":123,"sources":124,"tags":125},"https://access.redhat.com/errata/RHSA-2026:12269",[56],[64,99],{"url":127,"sources":128,"tags":129},"https://access.redhat.com/errata/RHSA-2026:18059",[56],[64,99],[],{"date":132,"score":52,"percentile":133},"2026-07-05",0.48335,[135,139,142,145,148,151,154,158,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,230,233,237,240,243,246,249,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,383],{"date":136,"score":137,"percentile":138},"2026-04-15",0.00045,0.13791,{"date":140,"score":137,"percentile":141},"2026-04-16",0.13788,{"date":143,"score":137,"percentile":144},"2026-04-17",0.13782,{"date":146,"score":137,"percentile":147},"2026-04-18",0.13783,{"date":149,"score":137,"percentile":150},"2026-04-19",0.13742,{"date":152,"score":137,"percentile":153},"2026-04-20",0.13713,{"date":155,"score":156,"percentile":157},"2026-04-21",0.00019,0.05165,{"date":159,"score":160,"percentile":161},"2026-04-22",0.00018,0.04778,{"date":163,"score":160,"percentile":164},"2026-04-23",0.04797,{"date":166,"score":160,"percentile":167},"2026-04-24",0.04801,{"date":169,"score":160,"percentile":170},"2026-04-25",0.04841,{"date":172,"score":160,"percentile":173},"2026-04-26",0.0484,{"date":175,"score":160,"percentile":176},"2026-04-27",0.04835,{"date":178,"score":160,"percentile":179},"2026-04-28",0.04833,{"date":181,"score":160,"percentile":182},"2026-04-29",0.04856,{"date":184,"score":160,"percentile":185},"2026-04-30",0.0487,{"date":187,"score":160,"percentile":188},"2026-05-01",0.04869,{"date":190,"score":160,"percentile":191},"2026-05-02",0.04876,{"date":193,"score":160,"percentile":194},"2026-05-03",0.04865,{"date":196,"score":160,"percentile":197},"2026-05-04",0.04858,{"date":199,"score":160,"percentile":200},"2026-05-05",0.04852,{"date":202,"score":160,"percentile":203},"2026-05-06",0.04862,{"date":205,"score":160,"percentile":206},"2026-05-07",0.04901,{"date":208,"score":160,"percentile":209},"2026-05-08",0.04903,{"date":211,"score":160,"percentile":212},"2026-05-09",0.04945,{"date":214,"score":160,"percentile":215},"2026-05-10",0.04961,{"date":217,"score":160,"percentile":218},"2026-05-11",0.0495,{"date":220,"score":160,"percentile":221},"2026-05-12",0.04947,{"date":223,"score":160,"percentile":224},"2026-05-13",0.04954,{"date":226,"score":160,"percentile":227},"2026-05-14",0.04949,{"date":229,"score":160,"percentile":227},"2026-05-15",{"date":231,"score":160,"percentile":232},"2026-05-16",0.04959,{"date":234,"score":235,"percentile":236},"2026-05-17",0.0002,0.05624,{"date":238,"score":235,"percentile":239},"2026-05-18",0.05604,{"date":241,"score":235,"percentile":242},"2026-05-19",0.056,{"date":244,"score":235,"percentile":245},"2026-05-20",0.05568,{"date":247,"score":235,"percentile":248},"2026-05-21",0.05559,{"date":250,"score":251,"percentile":252},"2026-05-22",0.00022,0.06569,{"date":254,"score":251,"percentile":255},"2026-05-23",0.06566,{"date":257,"score":251,"percentile":258},"2026-05-24",0.06565,{"date":260,"score":251,"percentile":261},"2026-05-25",0.06543,{"date":263,"score":251,"percentile":264},"2026-05-26",0.06512,{"date":266,"score":251,"percentile":267},"2026-05-27",0.06546,{"date":269,"score":251,"percentile":270},"2026-05-28",0.06649,{"date":272,"score":251,"percentile":273},"2026-05-29",0.06664,{"date":275,"score":251,"percentile":276},"2026-05-30",0.06656,{"date":278,"score":251,"percentile":279},"2026-05-31",0.06641,{"date":281,"score":251,"percentile":282},"2026-06-01",0.06604,{"date":284,"score":251,"percentile":285},"2026-06-02",0.0654,{"date":287,"score":251,"percentile":288},"2026-06-03",0.06492,{"date":290,"score":251,"percentile":291},"2026-06-04",0.06501,{"date":293,"score":251,"percentile":294},"2026-06-05",0.0653,{"date":296,"score":251,"percentile":297},"2026-06-06",0.06528,{"date":299,"score":251,"percentile":300},"2026-06-07",0.06519,{"date":302,"score":251,"percentile":303},"2026-06-08",0.06478,{"date":305,"score":251,"percentile":306},"2026-06-09",0.0648,{"date":308,"score":251,"percentile":309},"2026-06-10",0.06509,{"date":311,"score":251,"percentile":312},"2026-06-11",0.06511,{"date":314,"score":251,"percentile":315},"2026-06-12",0.06534,{"date":317,"score":251,"percentile":318},"2026-06-13",0.06522,{"date":320,"score":251,"percentile":321},"2026-06-14",0.06504,{"date":323,"score":324,"percentile":325},"2026-06-15",0.00512,0.39339,{"date":327,"score":324,"percentile":328},"2026-06-16",0.39395,{"date":330,"score":324,"percentile":331},"2026-06-17",0.39461,{"date":333,"score":324,"percentile":334},"2026-06-18",0.39513,{"date":336,"score":324,"percentile":337},"2026-06-19",0.39504,{"date":339,"score":324,"percentile":340},"2026-06-20",0.39497,{"date":342,"score":324,"percentile":343},"2026-06-21",0.39478,{"date":345,"score":324,"percentile":346},"2026-06-22",0.3947,{"date":348,"score":324,"percentile":349},"2026-06-23",0.39552,{"date":351,"score":324,"percentile":352},"2026-06-24",0.39587,{"date":354,"score":324,"percentile":355},"2026-06-25",0.3966,{"date":357,"score":324,"percentile":358},"2026-06-26",0.39702,{"date":360,"score":324,"percentile":361},"2026-06-27",0.39743,{"date":363,"score":324,"percentile":364},"2026-06-28",0.3973,{"date":366,"score":324,"percentile":367},"2026-06-29",0.39733,{"date":369,"score":52,"percentile":370},"2026-06-30",0.48153,{"date":372,"score":52,"percentile":373},"2026-07-01",0.48242,{"date":375,"score":52,"percentile":376},"2026-07-02",0.4828,{"date":378,"score":52,"percentile":379},"2026-07-03",0.48297,{"date":381,"score":52,"percentile":382},"2026-07-04",0.48322,{"date":132,"score":52,"percentile":133},[385,393,396],{"source":56,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":386,"cvss_v4_0":392},{"baseScore":387,"baseSeverity":388,"vectorString":389,"impactScore":390,"exploitabilityScore":391},7.5,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",6,10,{"baseScore":54,"baseSeverity":388,"vectorString":57,"impactScore":9,"exploitabilityScore":9},{"source":62,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":394},{"baseScore":54,"baseSeverity":388,"vectorString":395,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red",{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":397},{"baseScore":398,"baseSeverity":9,"vectorString":57,"impactScore":9,"exploitabilityScore":9},9.9,[400,429,441,448],{"ecosystem":9,"name":401,"vendor":402,"product":403,"cpe_part":404,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":405},"BC-JAVA","legion of the bouncy castle inc.","bc-java","a",[406,413,416,420,423,426],{"version":407,"is_range":408,"range_type":56,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},">= 2.17.3, \u003C 1.84",true,"2.17.3","including","1.84","excluding",{"version":414,"is_range":408,"range_type":56,"version_start":415,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},">= 1.71, \u003C 1.84","1.71",{"version":417,"is_range":408,"range_type":56,"version_start":418,"version_start_type":410,"version_end":419,"version_end_type":412,"fixed_in":9},">= 1.81, \u003C 1.80.1","1.81","1.80.1",{"version":421,"is_range":408,"range_type":56,"version_start":415,"version_start_type":410,"version_end":422,"version_end_type":412,"fixed_in":9},">= 1.71, \u003C 1.80.2","1.80.2",{"version":424,"is_range":408,"range_type":56,"version_start":418,"version_start_type":410,"version_end":425,"version_end_type":412,"fixed_in":9},">= 1.81, \u003C 1.81.1","1.81.1",{"version":427,"is_range":408,"range_type":56,"version_start":428,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},">= 1.82, \u003C 1.84","1.82",{"ecosystem":430,"name":431,"vendor":432,"product":433,"cpe_part":9,"purl_type":434,"purl_namespace":432,"purl_name":433,"source":9,"versions":435},"Maven","org.bouncycastle:bcprov-jdk14","org.bouncycastle","bcprov-jdk14","maven",[436,439],{"version":437,"is_range":408,"range_type":438,"version_start":415,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},"gte1_71_lt1_84","ecosystem",{"version":440,"is_range":408,"range_type":438,"version_start":418,"version_start_type":410,"version_end":425,"version_end_type":412,"fixed_in":9},"gte1_81_lt1_81_1",{"ecosystem":430,"name":442,"vendor":432,"product":443,"cpe_part":9,"purl_type":434,"purl_namespace":432,"purl_name":443,"source":9,"versions":444},"org.bouncycastle:bcprov-jdk15to18","bcprov-jdk15to18",[445,446],{"version":437,"is_range":408,"range_type":438,"version_start":415,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},{"version":447,"is_range":408,"range_type":438,"version_start":415,"version_start_type":410,"version_end":422,"version_end_type":412,"fixed_in":9},"gte1_71_lt1_80_2",{"ecosystem":430,"name":449,"vendor":432,"product":450,"cpe_part":9,"purl_type":434,"purl_namespace":432,"purl_name":450,"source":9,"versions":451},"org.bouncycastle:bcprov-jdk18on","bcprov-jdk18on",[452,453],{"version":437,"is_range":408,"range_type":438,"version_start":415,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},{"version":454,"is_range":408,"range_type":438,"version_start":428,"version_start_type":410,"version_end":411,"version_end_type":412,"fixed_in":9},"gte1_82_lt1_84"]