bouncycastle
NuGet · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Bouncy Castle crafted signature and public key can be used to trigger an infinite loop | org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15to18 | MavenNuGetRed Hat | Medium | Fix reported | |
| Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") | org.bouncycastle:bcprov-jdk14org.bouncycastle:bcprov-jdk15on | MavenNuGetRed Hat | Medium | Fix reported | |
| Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. | org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-jdk14 | MavenNuGetRed Hat | Medium | Fix reported | |
| Timing based private key exposure in Bouncy Castle | org.bouncycastle:bc-fipsorg.bouncycastle:bcprov-ext-jdk15on | MavenNuGetRed Hat | Medium | Fix reported |