NuGet - OSV

GHSA-8xfc-gm6g-vgpv

Maven/org.bouncycastle:bc-fips
Maven/org.bouncycastle:bcprov-jdk14
Maven/org.bouncycastle:bcprov-jdk15on
Maven/org.bouncycastle:bcprov-jdk15to18
Maven/org.bouncycastle:bcprov-jdk18on
... 5 more

Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 14 May 2024

Fix available
Severity - 5.3 (Medium)

GHSA-m44j-cfrm-g8qc

Maven/org.bouncycastle:bcprov-jdk14
Maven/org.bouncycastle:bcprov-jdk15to18
Maven/org.bouncycastle:bcprov-jdk18on
Maven/org.bouncycastle:bctls-jdk14
Maven/org.bouncycastle:bctls-jdk15to18
... 3 more

Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 14 May 2024

Fix available
Severity - 6.9 (Medium)

GHSA-v435-xc8x-wvr9

Maven/org.bouncycastle:bcprov-jdk14
Maven/org.bouncycastle:bcprov-jdk15on
Maven/org.bouncycastle:bcprov-jdk15to18
Maven/org.bouncycastle:bcprov-jdk18on
Maven/org.bouncycastle:bctls-fips
... 5 more

Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 14 May 2024

Fix available
Severity - 5.9 (Medium)