4 Total advisories
4 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.bouncycastle:bcprov-lts8on is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.1
CVE-2026-8763
Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI
HIGH 7.5
CVE-2026-13506
Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard
UNKNOWN
CVE-2026-8149
Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption
MEDIUM 5.9
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes