Security
فارسی
All products

org.bouncycastle:bc-fips

Maven · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guardCVE-2026-13506 · GHSA-QP49-QGX5-5M26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat High Fix reported
Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization.CVE-2026-13505 · GHSA-98J2-6V39-78W8 org.bouncycastle:bc-fips Maven High Fix reported
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URICVE-2026-8763 · GHSA-9PWP-9QQC-PR26 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk15to18 MavenRed Hat Critical Fix reported
Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any boundCVE-2026-8798 · GHSA-V6W3-QRH8-QCCC org.bouncycastle:bc-fips Maven High Fix reported
Bouncy Castle Vulnerable to Uncontrolled Resource ConsumptionCVE-2025-12194 · GHSA-JV6H-4262-Q663 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-debug-lts8on MavenRed Hat Medium Fix reported
Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC org.bouncycastle:bc-fipsCryostat 4/bcpkix-jdk18on MavenRed Hat Low Fix reported
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Garbage collection issue in BC-FJA in Java 13 and laterCVE-2022-45146 · GHSA-68M8-V89J-7J2P org.bouncycastle:bc-fips Maven Medium Fix reported
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.CVE-2024-29857 · GHSA-8XFC-GM6G-VGPV org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 MavenNuGetRed Hat Medium Fix reported
Timing based private key exposure in Bouncy CastleCVE-2020-15522 · GHSA-6XX3-RG99-GC3P org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-ext-jdk15on MavenNuGetRed Hat Medium Fix reported
Bouncy Castle for Java has Out-of-Bounds Write VulnerabilityCVE-2025-9340 · GHSA-G6RX-6WFX-GJ74 org.bouncycastle:bc-fips Maven Low Fix reported
Bouncy Castle for Java has Uncontrolled Resource Consumption VulnerabilityCVE-2025-9341 · GHSA-JFCV-JV9G-2VX2 org.bouncycastle:bc-fipsorg.bouncycastle:bctls-fips Maven Medium Fix reported
Observable Differences in Behavior to Error Inputs in Bouncy CastleCVE-2020-26939 · GHSA-72M5-FVVV-55M6 org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-ext-jdk15on Maven Medium Fix reported