<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="ja" invalidated="false">
    <VulinfoID>JVNDB-2026-031789</VulinfoID>
    <VulinfoData>
      <Title>Bouncy Castle&#12398;bc-java&#31561;&#12398;&#35079;&#25968;&#35069;&#21697;&#12395;&#12362;&#12369;&#12427;&#26263;&#21495;&#24375;&#24230;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>&#12496;&#12540;&#12472;&#12519;&#12531;1.85&#20197;&#21069;&#12398;Java&#29992;Bouncy Castle&#12398;BKS&#12461;&#12540;&#12473;&#12488;&#12450;&#12399;&#12289;16&#12499;&#12483;&#12488;&#12398;&#25972;&#21512;&#24615;MAC&#12461;&#12540;&#12434;&#25345;&#12388;&#12524;&#12460;&#12471;&#12540;&#12496;&#12540;&#12472;&#12519;&#12531;&#12434;&#21463;&#12369;&#20837;&#12428;&#12427;&#21839;&#38988;&#12364;&#12354;&#12426;&#12414;&#12377;&#12290;&#12371;&#12398;&#21839;&#38988;&#12399;&#12289;2.73.12&#20197;&#21069;&#12398;Java&#29992;Bouncy Castle LTS&#12395;&#12418;&#24433;&#38911;&#12434;&#21450;&#12412;&#12375;&#12414;&#12377;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:bouncycastle:bc-java</Lapt>
        </AffectedItem>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:bouncycastle:bouncy_castle_for_java_lts</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-031789.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-59651</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-59651</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-59651</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-59651</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>GitHub</Name>
          <VulinfoID>CVE&#8208;2026&#8208;59651  bcgit/bc-java Wiki  GitHub</VulinfoID>
          <URL>https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9059651</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-326</VulinfoID>
          <Title>&#19981;&#36969;&#20999;&#12394;&#26263;&#21495;&#24375;&#24230;</Title>
          <URL>https://cwe.mitre.org/data/definitions/326.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>Gate loading of legacy 16-bit-MAC BKS v0/v1 keystores behind enable_v&#8230;  bcgit/bc-java@faf5daa  GitHub</VulinfoID>
          <URL>https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-09-03T15:46:40+09:00</DateFirstPublished>
      <DateLastUpdated>2026-09-03T15:46:40+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
