org.bouncycastle:bcprov-jdk15to18 vulnerabilities (Maven)
15 vulnerabilities.
org.bouncycastle:bcprov-jdk15to18MavenLazy ASN.1 sequence forcing resets nesting-depth guard8.7 Highorg.bouncycastle:bcprov-jdk15to18MavenName Constraints bypass via trailing dot in rfc822Name and URI9.3 Criticalorg.bouncycastle:bcprov-jdk15to18MavenNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Highorg.bouncycastle:bcprov-jdk15to18MavenLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumorg.bouncycastle:bcprov-jdk15to18MavenGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticalorg.bouncycastle:bcprov-jdk15to18MavenPossible DOS in processing specially formed ASN.1 Object Identifiers6.3 Mediumorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Highorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 Highorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle Denial of Service (DoS)5.5 Mediumorg.bouncycastle:bcprov-jdk15to18MavenBouncy Castle For Java LDAP injection vulnerability5.3 Mediumorg.bouncycastle:bcprov-jdk15to18MavenTiming based private key exposure in Bouncy Castle5.9 Mediumorg.bouncycastle:bcprov-jdk15to18MavenLogic error in Legion of the Bouncy Castle BC Java8.1 Highorg.bouncycastle:bcprov-jdk15to18MavenObservable Differences in Behavior to Error Inputs in Bouncy Castle5.3 Medium