Security
فارسی
All products

org.bouncycastle:bcprov-jdk18on

Maven · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle has an LDAP injectionCVE-2026-0636 · GHSA-C3FC-8QFF-9HWX org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenRed Hat Medium Fix reported
Bouncy Castle Has Covert Timing Channel VulnerabilityCVE-2026-5598 · GHSA-P93R-85WP-75V3 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenRed Hat High Fix reported
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocksCVE-2025-14813 · GHSA-574F-3G2M-X479 org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on MavenRed Hat Critical Fix reported
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506 · GHSA-QP49-QGX5-5M26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat High Fix reported
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat Critical Fix reported
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle crafted signature and public key can be used to trigger an infinite loopCVE-2024-30172 · GHSA-M44J-CFRM-G8QC org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 MavenNuGetRed Hat Medium Fix reported
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")CVE-2024-30171 · GHSA-V435-XC8X-WVR9 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15on MavenNuGetRed Hat Medium Fix reported
Bouncy Castle Java Cryptography API vulnerable to DNS poisoningCVE-2024-34447 · GHSA-4H8F-2WVX-GG5W org.bouncycastle:bcprov-jdk12org.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle Denial of Service (DoS)CVE-2023-33202 · GHSA-WJXJ-5M7G-MG7Q org.bouncycastle:bcpkix-jdk18onorg.bouncycastle:bcprov-ext-jdk15on MavenRed Hat Medium Fix reported
Bouncy Castle For Java LDAP injection vulnerabilityCVE-2023-33201 · GHSA-HR8G-6V94-X4M9 org.bouncycastle:bcprov-debug-jdk14org.bouncycastle:bcprov-debug-jdk15on MavenRed Hat Medium Fix reported
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.CVE-2024-29857 · GHSA-8XFC-GM6G-VGPV org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenNuGetRed Hat Medium Fix reported