org.bouncycastle:bc-fips vulnerabilities (Maven)
13 vulnerabilities.
org.bouncycastle:bc-fipsMavenZeroisation of sensitive key material on garbage collection relies on finalization8.7 Highorg.bouncycastle:bc-fipsMavenNative entropy source retries the CPU entropy instructions without limit8.7 Highorg.bouncycastle:bc-fipsMavenLazy ASN.1 sequence forcing resets nesting-depth guard8.7 Highorg.bouncycastle:bc-fipsMavenName Constraints bypass via trailing dot in rfc822Name and URI9.3 Criticalorg.bouncycastle:bc-fipsMavenBouncy Castle Vulnerable to Uncontrolled Resource Consumption5.9 Mediumorg.bouncycastle:bc-fipsMavennative encrypt/decrypt operations in JCE may corrupt data if same byte array used for input and output.0.0 Noneorg.bouncycastle:bc-fipsMavenGarbage collection can delay for AES CBC Native support, resulting in heap exhaustion5.9 Mediumorg.bouncycastle:bc-fipsMavenHybrid Module Deployment in Multi-JVM Environments Leading to Resource Exhaustion1.0 Loworg.bouncycastle:bc-fipsMavenPossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Mediumorg.bouncycastle:bc-fipsMavenBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bc-fipsMavenGarbage collection issue in BC-FJA in Java 13 and later5.5 Mediumorg.bouncycastle:bc-fipsMavenTiming based private key exposure in Bouncy Castle5.9 Mediumorg.bouncycastle:bc-fipsMavenObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 Medium