Security
فارسی
All products

org.bouncycastle:bcprov-jdk15to18

Maven · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle has an LDAP injectionCVE-2026-0636 · GHSA-C3FC-8QFF-9HWX org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenRed Hat Medium Fix reported
Bouncy Castle Has Covert Timing Channel VulnerabilityCVE-2026-5598 · GHSA-P93R-85WP-75V3 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenRed Hat High Fix reported
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocksCVE-2025-14813 · GHSA-574F-3G2M-X479 org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on MavenRed Hat Critical Fix reported
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506 · GHSA-QP49-QGX5-5M26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat High Fix reported
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat Critical Fix reported
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle crafted signature and public key can be used to trigger an infinite loopCVE-2024-30172 · GHSA-M44J-CFRM-G8QC org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenNuGetRed Hat Medium Fix reported
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")CVE-2024-30171 · GHSA-V435-XC8X-WVR9 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15on MavenNuGetRed Hat Medium Fix reported
Bouncy Castle Java Cryptography API vulnerable to DNS poisoningCVE-2024-34447 · GHSA-4H8F-2WVX-GG5W org.bouncycastle:bcprov-jdk12org.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle Denial of Service (DoS)CVE-2023-33202 · GHSA-WJXJ-5M7G-MG7Q org.bouncycastle:bcpkix-jdk18onorg.bouncycastle:bcprov-ext-jdk15on MavenRed Hat Medium Fix reported
Bouncy Castle For Java LDAP injection vulnerabilityCVE-2023-33201 · GHSA-HR8G-6V94-X4M9 org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on MavenRed Hat Medium Fix reported
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.CVE-2024-29857 · GHSA-8XFC-GM6G-VGPV org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenNuGetRed Hat Medium Fix reported
Timing based private key exposure in Bouncy CastleCVE-2020-15522 · GHSA-6XX3-RG99-GC3P org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-ext-jdk15on MavenNuGetRed Hat Medium Fix reported
Observable Differences in Behavior to Error Inputs in Bouncy CastleCVE-2020-26939 · GHSA-72M5-FVVV-55M6 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-ext-jdk15on Maven Medium Fix reported
Logic error in Legion of the Bouncy Castle BC JavaCVE-2020-28052 · GHSA-73XV-W5GP-FRXH org.bouncycastle:bcprov-ext-jdk15onorg.bouncycastle:bcprov-ext-jdk16 MavenRed Hat High Fix reported