Legion of the Bouncy Castle Inc. BC-LTS

• CVE-2026-15997 Low 1.7 Native ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded state 0.1%
• CVE-2026-8149 Medium 5.1 GCM chunking can lead to bad tag exception on decryption 0.2%