Legion of the Bouncy Castle Inc. BCPKIX FIPS

• CVE-2026-5588 High 7.5 PKIX draft CompositeVerifier accepts empty signature sequence as valid. 0.8%
• CVE-2025-8916 Medium 6.3 Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer 0.5%