org.bouncycastle:bctls-fips vulnerabilities (Maven)
3 vulnerabilities.
org.bouncycastle:bctls-fipsMavenGarbage collection can delay for AES CBC Native support, resulting in heap exhaustion5.9 Mediumorg.bouncycastle:bctls-fipsMavenBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumorg.bouncycastle:bctls-fipsMavenBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 High