Root has patched CVE-2026-59642 in the org.bouncycastle:bcpkix-jdk18on package for Root:Maven. Multiple fixed versions available.
{ "severity": "HIGH", "distro": "maven", "source": "Root", "distro_version": "" }
[ "1.78.1-aikido.14", "1.83-aikido.5", "1.77-aikido.3" ]
"aikido.3"
"1.77"
true
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2026-59642.json"
3.0
[ "1.78.1-root.io.14", "1.83-root.io.5", "1.77-root.io.3" ]
"root.io.3"