Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/bouncycastle@1.51-1?distro=trixie
purl pkg:deb/debian/bouncycastle@1.51-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-waqt-x8vm-qyez The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack." CVE-2015-7940
GHSA-4mv7-cq75-3qjm

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:14:47.573532+00:00 Debian Importer Fixing VCID-waqt-x8vm-qyez https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:22:35.986230+00:00 Debian Importer Fixing VCID-waqt-x8vm-qyez https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:14:11.706866+00:00 Debian Importer Fixing VCID-waqt-x8vm-qyez https://security-tracker.debian.org/tracker/data/json 38.1.0