Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-574f-3g2m-x479
  • Maven/org.bouncycastle:bcprov-debug-jdk14
  • Maven/org.bouncycastle:bcprov-debug-jdk15on
  • Maven/org.bouncycastle:bcprov-debug-jdk15to18
  • Maven/org.bouncycastle:bcprov-debug-jdk18on
  • Maven/org.bouncycastle:bcprov-ext-debug-jdk14
  • ... 9 more
 Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks 17 Apr
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-8xfc-gm6g-vgpv
  • Maven/org.bouncycastle:bc-fips
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15on
  • Maven/org.bouncycastle:bcprov-jdk15to18
  • Maven/org.bouncycastle:bcprov-jdk18on
  • ... 5 more
 Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 14 May 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-v435-xc8x-wvr9
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15on
  • Maven/org.bouncycastle:bcprov-jdk15to18
  • Maven/org.bouncycastle:bcprov-jdk18on
  • Maven/org.bouncycastle:bctls-fips
  • ... 5 more
 Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 14 May 2024
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-4h8f-2wvx-gg5w
  • Maven/org.bouncycastle:bcprov-jdk12
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15on
  • Maven/org.bouncycastle:bcprov-jdk15to18
  • Maven/org.bouncycastle:bcprov-jdk18on
  • ... 2 more
 Bouncy Castle Java Cryptography API vulnerable to DNS poisoning 03 May 2024
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wjxj-5m7g-mg7q
  • Maven/org.bouncycastle:bcpkix-jdk18on
  • Maven/org.bouncycastle:bcprov-ext-jdk15on
  • Maven/org.bouncycastle:bcprov-ext-jdk16
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • ... 4 more
 Bouncy Castle Denial of Service (DoS) 23 Nov 2023
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-hr8g-6v94-x4m9
  • Maven/org.bouncycastle:bcprov-debug-jdk14
  • Maven/org.bouncycastle:bcprov-debug-jdk15on
  • Maven/org.bouncycastle:bcprov-debug-jdk15to18
  • Maven/org.bouncycastle:bcprov-debug-jdk18on
  • Maven/org.bouncycastle:bcprov-ext-jdk14
  • ... 7 more
 Bouncy Castle For Java LDAP injection vulnerability 05 Jul 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-8353-fgcr-xfhx
  • Maven/org.bouncycastle:bcprov-jdk15on
 Improper Input Validation in Bouncy Castle 14 May 2022
  • Fix available
GHSA-wrwf-pmmj-w989
  • Maven/org.bouncycastle:bcprov-jdk15on
 Observable Discrepancy in BouncyCastle 13 May 2022
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-8477-3v39-ggpm
  • Maven/org.bouncycastle:bcprov-jdk15on
 Improper Validation of Integrity Check Value in Bouncy Castle 13 May 2022
  • Fix available
  • Severity - 4.4 (Medium)
GHSA-6xx3-rg99-gc3p
  • Maven/org.bouncycastle:bc-fips
  • Maven/org.bouncycastle:bcprov-ext-jdk15on
  • Maven/org.bouncycastle:bcprov-ext-jdk16
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • ... 4 more
 Timing based private key exposure in Bouncy Castle 13 Aug 2021
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-73xv-w5gp-frxh
  • Maven/org.bouncycastle:bcprov-ext-jdk15on
  • Maven/org.bouncycastle:bcprov-ext-jdk16
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • Maven/org.bouncycastle:bcprov-jdk15on
  • ... 2 more
 Logic error in Legion of the Bouncy Castle BC Java 30 Apr 2021
  • Fix available
  • Severity - 8.1 (High)
GHSA-72m5-fvvv-55m6
  • Maven/org.bouncycastle:bc-fips
  • Maven/org.bouncycastle:bcprov-ext-jdk15on
  • Maven/org.bouncycastle:bcprov-ext-jdk16
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • ... 3 more
 Observable Differences in Behavior to Error Inputs in Bouncy Castle 22 Apr 2021
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-9gp4-qrff-c648
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • Maven/org.bouncycastle:bcprov-jdk15on
 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 18 Oct 2018
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-2j2x-hx4g-2gf4
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • Maven/org.bouncycastle:bcprov-jdk15on
 In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode 18 Oct 2018
  • Fix available
  • Severity - 7.4 (High)
GHSA-4mv7-cq75-3qjm
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • Maven/org.bouncycastle:bcprov-jdk15on
 Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15 17 Oct 2018
  • Fix available
GHSA-w285-wf9q-5w69
  • Maven/org.bouncycastle:bcprov-jdk14
  • Maven/org.bouncycastle:bcprov-jdk15
  • Maven/org.bouncycastle:bcprov-jdk15on
 In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode 17 Oct 2018
  • Fix available
  • Severity - 7.4 (High)
Load more...