org.bouncycastle:bcpg-jdk15to18 vulnerabilities (TuxCare)
9 vulnerabilities.
org.bouncycastle:bcpg-jdk15to18TuxCareLazy ASN.1 sequence forcing resets nesting-depth guard8.7 Highorg.bouncycastle:bcpg-jdk15to18TuxCareName Constraints bypass via trailing dot in rfc822Name and URI9.3 Criticalorg.bouncycastle:bcpg-jdk15to18TuxCareUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Highorg.bouncycastle:bcpg-jdk15to18TuxCarePKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumorg.bouncycastle:bcpg-jdk15to18TuxCareNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Highorg.bouncycastle:bcpg-jdk15to18TuxCareLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumorg.bouncycastle:bcpg-jdk15to18TuxCareGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticalorg.bouncycastle:bcpg-jdk15to18TuxCareBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Highorg.bouncycastle:bcpg-jdk15to18TuxCareBouncy Castle Java Cryptography API vulnerable to DNS poisoning7.5 High