org.bouncycastle:bcpkix-jdk15on vulnerabilities (Root)
3 vulnerabilities.
org.bouncycastle:bcpkix-jdk15onRootCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absent8.7 Highorg.bouncycastle:bcpkix-jdk15onRootPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumorg.bouncycastle:bcpkix-jdk15onRootPossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 Medium