{"id":"CVE-2018-1000180","aliases":["DEBIAN-CVE-2018-1000180","DSA-4233-1","EUVD-2018-0718","GHSA-xqj7-j8j5-f2xr","MGASA-2018-0376","RHSA-2018:2423","RHSA-2018:2424","RHSA-2018:2643","ROOT-APP-MAVEN-CVE-2018-1000180","UBUNTU-CVE-2018-1000180","openSUSE-SU-2024:10661-1"],"status":"published","title":"Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0342,"percentile":0.89007,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-327"],"published":"2018-06-05T13:00:00Z","modified":"2026-10-23T18:02:56Z","fixes":[{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","fixed_in":["1.60"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","fixed_in":["1.60"],"sources":["ghsa","osv"]},{"ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","fixed_in":["1.60"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"bouncycastle","fixed_in":["1.59-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bouncycastle","fixed_in":["1.59-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bouncycastle","fixed_in":["1.59-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"bouncycastle","fixed_in":["1.56-1+deb9u2"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.bouncycastle:bcprov-jdk15on","fixed_in":["1.60-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.bouncycastle:bcprov-jdk15on","fixed_in":["1.60-root.io.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-1+deb9u2"}]}],"versions":["1.56-1","1.56-1+deb9u1"]},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}],"versions":["1.38","1.43","1.44","1.45","1.46","1.47","1.48","1.49","1.50","1.51","1.53","1.54","1.55","1.56","1.57","1.58","1.59"]},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}],"versions":["1.32","1.38","1.40","1.43","1.44","1.45","1.46"]},{"source":"osv","ecosystem":"Maven","package":"org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60"}]}],"versions":["1.46","1.47","1.48","1.49","1.50","1.51","1.52","1.53","1.54","1.55","1.56","1.57","1.58","1.59"]},{"source":"osv","ecosystem":"Mageia:6","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-1.mga6"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.0-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.0-1.redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap6.4-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap7.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-compensations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-narayana-txframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-7.SP8_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-1.GA_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-2.GA_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-1.GA_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-openssl-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-14.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-openssl-linux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-14.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7::el6","package":"eap7-wildfly-web-console-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.18-1.Final_redhat_1.1.ep7.el6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5.013-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.56.0-5.redhat_3.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-guava","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.0-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-guava-libraries","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:25.0.0-1.redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-hibernate-java8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.15-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jberet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jberet-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-2.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.11-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap7.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly10.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly10.1-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly8.2-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-jboss-server-migration-wildfly9.0-to-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-4.Final_redhat_4.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-compensations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-jbosstxbridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-jbossxts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-jts-idlj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-jts-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-restat-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-restat-bridge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-restat-integration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-restat-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-narayana-txframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.32-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-idm-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-idm-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-idm-simple-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-picketlink-wildfly8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.5-13.SP12_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-atom-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jackson-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jackson2-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jaxb-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jettison-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jose-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-jsapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-json-p-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-multipart-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-validator-provider-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-resteasy-yaml-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.26-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.18-7.SP8_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-1.GA_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-2.GA_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.4-1.GA_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-openssl-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-14.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-openssl-linux-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.6-14.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.4-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.1::el7","package":"eap7-wildfly-web-console-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.18-1.Final_redhat_1.1.ep7.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"rhvm-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2-20180828.0.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Root:Maven","package":"org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.bouncycastle:bcprov-jdk15on","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-root.io.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.57-1","1.58-1","1.59-1","1.59-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.68-3.2"}]}],"bundled":16}],"products":[{"vendor":"bouncycastle","product":"bc-java"},{"vendor":"bouncycastle","product":"fips_java_api"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"oracle","product":"api_gateway"},{"vendor":"oracle","product":"business_process_management_suite"},{"vendor":"oracle","product":"business_transaction_management"},{"vendor":"oracle","product":"communications_application_session_controller"},{"vendor":"oracle","product":"communications_converged_application_server"},{"vendor":"oracle","product":"communications_webrtc_session_controller"},{"vendor":"oracle","product":"enterprise_repository"},{"vendor":"oracle","product":"managed_file_transfer"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"oracle","product":"retail_convenience_and_fuel_pos_software"},{"vendor":"oracle","product":"retail_xstore_point_of_service"},{"vendor":"oracle","product":"soa_suite"},{"vendor":"oracle","product":"webcenter_portal"},{"vendor":"oracle","product":"weblogic_server"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"},{"vendor":"redhat","product":"virtualization"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:2428","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2669","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2643","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2424","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2423","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2425","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.debian.org/security/2018/dsa-4233","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/106567","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0877","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20190204-0003/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000180","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xqj7-j8j5-f2xr","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20190204-0003","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000180","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0376.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22197","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-06/msg00085.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-07/msg00089.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/?version=7.1","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1588306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1593527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595332","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-14787","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2423.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12624","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8039","tags":["advisory"]},{"url":"http://cxf.apache.org/security-advisories.data/CVE-2018-8039.txt.asc?version=1\u0026modificationDate=1530184663000\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10237","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10237","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10237","tags":["advisory"]},{"url":"https://github.com/google/guava/wiki/CVE-2018-10237","tags":["article"]},{"url":"https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10862","tags":["advisory"]},{"url":"https://snyk.io/research/zip-slip-vulnerability","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000180","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000180","tags":["advisory","report"]},{"url":"https://issues.redhat.com/browse/JBEAP-14788","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2424.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616249","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2643.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1114","tags":["advisory"]},{"url":"https://bugs.openjdk.java.net/browse/JDK-6956385","tags":["article"]},{"url":"https://issues.jboss.org/browse/UNDERTOW-1338","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10915","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1878/","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2018-1000180","tags":["report"]},{"url":"https://www.bouncycastle.org/jira/browse/BJA-694","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28052","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1000180","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:00:00Z","modified":"2024-08-05T12:33:49.372Z","updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-0718","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:00:00Z","modified":"2024-08-05T12:33:49Z","updated_at":"2026-11-03T02:39:26.824954Z"}],"ghsa":[{"id":"GHSA-xqj7-j8j5-f2xr","title":"Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-10-16T17:44:39Z","modified":"2025-09-12T19:26:56Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:38:57.074217Z"}],"nvd":[{"id":"CVE-2018-1000180","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:29:00.203Z","modified":"2026-06-17T01:32:37.217Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:04:28.483469Z"}],"osv":[{"id":"CVE-2018-1000180","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:29:00.203Z","modified":"2026-10-20T13:25:28.095730818Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-1000180","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:29:00.203Z","modified":"2026-10-23T18:02:56.116818148Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"GHSA-xqj7-j8j5-f2xr","title":"Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-10-16T17:44:39Z","modified":"2025-09-12T20:04:13.290612Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RHSA-2018:2423","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 security update","status":"published","published":"2024-09-20T13:51:37Z","modified":"2026-08-05T10:05:32Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2424","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 security update","status":"published","published":"2024-09-20T13:51:43Z","modified":"2026-08-05T10:05:33Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2643","title":"Red Hat Security Advisory: rhvm-appliance security update","status":"published","published":"2024-09-20T13:51:23Z","modified":"2026-08-05T10:05:39Z","cvss":[{"version":"3.0","score":8.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-1000180","description":"Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in versions BC 1.60 beta 4 and later, BC-FJA 1.0.2 and later.","status":"published","published":"2018-06-05T13:29:00Z","modified":"2026-03-19T06:52:40.095221Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DSA-4233-1","title":"bouncycastle - security update","status":"published","published":"2018-06-22T00:00:00Z","modified":"2026-03-09T01:22:19.474816Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0376","title":"Updated bouncycastle packages fix security vulnerabilities","description":"Updated bouncycastle packages fix security vulnerabilities:\n\nEnsure full validation of ASN.1 encoding of signature on verification.\nIt was possible to inject extra elements in the sequence making up the\nsignature and still have it validate, which in some cases may have\nallowed the introduction of 'invisible' data into a signed structure\n(CVE-2016-1000338).\n\nPrevent AESEngine key information leak via lookup table accesses\n(CVE-2016-1000339).\n\nPreventcarry propagation bugs in the implementation of squaring for\nseveral raw math classes (CVE-2016-1000340).\n\nDSA signature generation was vulnerable to timing attack. Where timings\ncan be closely observed for the generation of signatures may have allowed\nan attacker to gain information about the signature's k value and\nultimately the private value as well (CVE-2016-1000341).\n\nEnsure that ECDSA does fully validate ASN.1 encoding of signature on\nverification. It was possible to inject extra elements in the sequence\nmaking up the signature and still have it validate, which in some cases\nmay have allowed the introduction of 'invisible' data into a signed\nstructure (CVE-2016-1000342).\n\nPrevent weak default settings for private DSA key pair generation\n(CVE-2016-1000343).\n\nRemoved DHIES from the provider to disable the unsafe usage of ECB mode\n(CVE-2016-1000344).\n\nThe DHIES/ECIES CBC mode was vulnerable to padding oracle attack. In an\nenvironment where timings can be easily observed, it was possible with\nenough observations to identify when the decryption is failing due to\npadding (CVE-2016-1000345).\n\nThe other party DH public key was not fully validated. This could have\ncaused issues as invalid keys could be used to reveal details about the\nother party's private key where static Diffie-Hellman is in use\n(CVE-2016-1000346).\n\nRemove ECIES from the provider to disable the unsafe usage of ECB mode\n(CVE-2016-1000352).\n\nBouncyCastle, when configured to use the JCE (Java Cryptography Extension)\nfor cryptographic functions, provided a weak Bleichenbacher oracle when\nany TLS cipher suite using RSA key exchange was negotiated. An attacker\ncan recover the private key from a vulnerable application. This\nvulnerability is referred to as \"ROBOT\" (CVE-2017-13098).\n\nIt was discovered that the low-level interface to the RSA key pair\ngenerator of Bouncy Castle (a Java implementation of cryptographic\nalgorithms) could perform less Miller-Rabin primality tests than expected\n(CVE-2018-1000180).\n\nFix use of Externally-Controlled Input to Select Classes or Code\n('Unsafe Reflection') (CVE-2018-1000613).\n","status":"published","published":"2018-09-20T23:17:55Z","modified":"2026-04-16T06:24:35.221735775Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10661-1","title":"bouncycastle-1.68-3.2 on GA media","description":"These are all security issues fixed in the bouncycastle-1.68-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:35:59.843999Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"ROOT-APP-MAVEN-CVE-2018-1000180","title":"CVE-2018-1000180 in org.bouncycastle:bcprov-jdk15on - Patched by Root","description":"Root has patched CVE-2018-1000180 in the org.bouncycastle:bcprov-jdk15on package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-10-07T14:06:53Z","modified":"2026-10-07T15:16:07.965051885Z","updated_at":"2026-11-02T15:53:26.76659Z"}]}}