org.bouncycastle:bcpkix-jdk18on vulnerabilities (Root)
5 vulnerabilities.
org.bouncycastle:bcpkix-jdk18onRootCMS AuthEnvelopedData fails to enforce tag-length on decryption8.7 Highorg.bouncycastle:bcpkix-jdk18onRootCMS verifySignatures returns true for SignedData with zero signers8.7 Highorg.bouncycastle:bcpkix-jdk18onRootCMS AuthenticatedData content not bound to MAC when authAttrs present8.7 Highorg.bouncycastle:bcpkix-jdk18onRootPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumorg.bouncycastle:bcpkix-jdk18onRootPossible DOS in processing large name constraint structures in PKIXCertPathReveiwer6.3 Medium