maven

org.bouncycastle:bcprov-jdk15

16 Total advisories

16 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.bouncycastle:bcprov-jdk15 is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.bouncycastle:bcprov-jdk15

Vulnerabilities

Timing based private key exposure in Bouncy Castle

Bouncy Castle Denial of Service (DoS)

In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate

The Bouncy Castle JCE Provider carry a propagation bug

In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

In Bouncy Castle JCE Provider the other party DH public key is not fully validated

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values

Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator

In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification

Observable Differences in Behavior to Error Inputs in Bouncy Castle

Logic error in Legion of the Bouncy Castle BC Java

Browse more Maven advisories

Start Securing