org.bouncycastle:bctls-jdk14
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Bouncy Castle for Java on All (API modules) allows Excessive Allocation | org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 | MavenRed Hat | Medium | Fix reported | |
| Bouncy Castle crafted signature and public key can be used to trigger an infinite loop | org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 | MavenNuGetRed Hat | Medium | Fix reported | |
| Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") | org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15on | MavenNuGetRed Hat | Medium | Fix reported | |
| Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. | org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 | MavenNuGetRed Hat | Medium | Fix reported |