All products

org.bouncycastle:bctls-fips

Maven · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")CVE-2024-30171 · GHSA-V435-XC8X-WVR9 org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15on MavenNuGetRed Hat Medium Fix reported
Bouncy Castle Java Cryptography API vulnerable to DNS poisoningCVE-2024-34447 · GHSA-4H8F-2WVX-GG5W org.bouncycastle:bcprov-jdk12org.bouncycastle:bcprov-jdk14 MavenRed Hat Medium Fix reported
Bouncy Castle for Java has Uncontrolled Resource Consumption VulnerabilityCVE-2025-9341 · GHSA-JFCV-JV9G-2VX2 org.bouncycastle:bc-fipsorg.bouncycastle:bctls-fips Maven Medium Fix reported