Red Hat JBoss Enterprise Application Platform Expansion Pack/bcprov-jdk18on

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Bouncy Castle for Java Uncontrolled Resource Consumption VulnerabilityCVE-2025-9092 · GHSA-V6CF-MV9H-C8MC	org.bouncycastle:bc-fips Cryostat 4/bcpkix-jdk18on	MavenRed Hat	Low	Fix reported	2026-09-10
Bouncy Castle for Java on All (API modules) allows Excessive AllocationCVE-2025-8885 · GHSA-67MF-3CR5-8W23	org.bouncycastle:bc-fips org.bouncycastle:bcprov-jdk14	MavenRed Hat	Medium	Fix reported	2026-09-10
Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive AllocationCVE-2025-8916 · GHSA-4CX2-FC23-5WG6	org.bouncycastle:bcpkix-fips org.bouncycastle:bcpkix-jdk15on	MavenRed Hat	Medium	Fix reported	2026-09-10
bouncycastle: Bouncy Castle for Java: Private key recovery via timing side-channel in ML-KEM (CRYSTALS-Kyber) routinesCVE-2024-14041	Red Hat JBoss Enterprise Application Platform Expansion Pack/bcprov-jdk18on	Red Hat	Medium	No fix reported	Not recorded
bouncycastle: Bouncy Castle for Java: Denial of Service via PKCS#12 MAC and bag-decryption KDF iteration-count boundCVE-2026-13586	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	Medium	No fix reported	Not recorded
org.bouncycastle:bcprov-jdk18on: org.bouncycastle:bcprov-lts8on: bouncycastle: org.bouncycastle:bcprov-jdk15on: bouncycastle: Denial of Service via unbounded iteration count in password-based encryptionCVE-2026-97873	OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel8 OpenShift Developer Tools and Services/ocp-tools-4/jenkins-rhel9	Red Hat	Medium	No fix reported	Not recorded
bouncycastle: bcprov-jdk18on: bouncycastle: Information disclosure via cryptographic side channels in HQCCVE-2026-18040	OpenShift Developer Tools and Services/jenkins-2-plugins OpenShift Developer Tools and Services/jenkins	Red Hat	Medium	No fix reported	Not recorded