{"url":"http://public2.vulnerablecode.io/api/packages/381414?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.74","type":"maven","namespace":"org.bouncycastle","name":"bcprov-jdk15to18","version":"1.74","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"1.84","latest_non_vulnerable_version":"1.84","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/26581?format=json","vulnerability_id":"VCID-bgde-gcja-k7ez","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-0636.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-0636.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-0636","reference_id":"","reference_type":"","scores":[{"value":"0.00022","scoring_system":"epss","scoring_elements":"0.06313","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-0636"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0636","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0636"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-java","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0636","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0636"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134343","reference_id":"1134343","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134343"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458641","reference_id":"2458641","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458641"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636","reference_id":"CVE%E2%80%902026%E2%80%900636","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:A/RE:M/U:Amber"},{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T13:12:14Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%900636"},{"reference_url":"https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde","reference_id":"d20cdb8430e09224114fec0179a71859929fcbde","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/RE:M/U:Amber"},{"value":"5.5","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/S:N/AU:Y/R:A/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-15T13:12:14Z/"}],"url":"https://github.com/bcgit/bc-java/commit/d20cdb8430e09224114fec0179a71859929fcbde"},{"reference_url":"https://github.com/advisories/GHSA-c3fc-8qff-9hwx","reference_id":"GHSA-c3fc-8qff-9hwx","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-c3fc-8qff-9hwx"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11720","reference_id":"RHSA-2026:11720","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11720"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:11721","reference_id":"RHSA-2026:11721","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:11721"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13631","reference_id":"RHSA-2026:13631","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13631"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14272","reference_id":"RHSA-2026:14272","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14272"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:14276","reference_id":"RHSA-2026:14276","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:14276"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17668","reference_id":"RHSA-2026:17668","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17668"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18054","reference_id":"RHSA-2026:18054","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18054"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18055","reference_id":"RHSA-2026:18055","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18055"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18059","reference_id":"RHSA-2026:18059","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18059"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21772","reference_id":"RHSA-2026:21772","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21772"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/373664?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.84","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.84"}],"aliases":["CVE-2026-0636","GHSA-c3fc-8qff-9hwx"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bgde-gcja-k7ez"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19148?format=json","vulnerability_id":"VCID-bmbd-7t3k-3kga","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34447.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-34447.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-34447","reference_id":"","reference_type":"","scores":[{"value":"0.00141","scoring_system":"epss","scoring_elements":"0.34001","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-34447"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34447","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34447"},{"reference_url":"http://security.netapp.com/advisory/ntap-20240614-0007","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://security.netapp.com/advisory/ntap-20240614-0007"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-java","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java"},{"reference_url":"https://github.com/bcgit/bc-java/issues/1656","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/issues/1656"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655","reference_id":"1070655","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279227","reference_id":"2279227","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279227"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34447","reference_id":"CVE-2024-34447","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34447"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447","reference_id":"CVE%E2%80%902024%E2%80%9034447","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-16T18:10:40Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447"},{"reference_url":"https://github.com/advisories/GHSA-4h8f-2wvx-gg5w","reference_id":"GHSA-4h8f-2wvx-gg5w","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4h8f-2wvx-gg5w"},{"reference_url":"https://www.bouncycastle.org/latest_releases.html","reference_id":"latest_releases.html","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-16T18:10:40Z/"}],"url":"https://www.bouncycastle.org/latest_releases.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240614-0007/","reference_id":"ntap-20240614-0007","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-16T18:10:40Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240614-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4271","reference_id":"RHSA-2024:4271","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4271"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4326","reference_id":"RHSA-2024:4326","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4326"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4884","reference_id":"RHSA-2024:4884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4884"},{"reference_url":"https://usn.ubuntu.com/8108-1/","reference_id":"USN-8108-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8108-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-wtd8-vvzc-nybu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78"}],"aliases":["CVE-2024-34447","GHSA-4h8f-2wvx-gg5w"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bmbd-7t3k-3kga"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19012?format=json","vulnerability_id":"VCID-g6kq-7x7q-a3f2","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30172.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30172.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-30172","reference_id":"","reference_type":"","scores":[{"value":"0.00091","scoring_system":"epss","scoring_elements":"0.25689","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-30172"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30172","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30172"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030172","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030172"},{"reference_url":"https://github.com/bcgit/bc-java/commit/1b9fd9b545e691bfb3941a9f6a797660c8860f02","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/1b9fd9b545e691bfb3941a9f6a797660c8860f02"},{"reference_url":"https://github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49"},{"reference_url":"https://github.com/bcgit/bc-java/commit/ebe1c75579170072dc59b8dee2b55ce31663178f","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/ebe1c75579170072dc59b8dee2b55ce31663178f"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030172","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030172"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240614-0007","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20240614-0007"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655","reference_id":"1070655","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293025","reference_id":"2293025","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293025"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30172","reference_id":"CVE-2024-30172","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30172"},{"reference_url":"https://github.com/advisories/GHSA-m44j-cfrm-g8qc","reference_id":"GHSA-m44j-cfrm-g8qc","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-m44j-cfrm-g8qc"},{"reference_url":"https://www.bouncycastle.org/latest_releases.html","reference_id":"latest_releases.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"6.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-05T13:44:28Z/"}],"url":"https://www.bouncycastle.org/latest_releases.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240614-0007/","reference_id":"ntap-20240614-0007","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-05T13:44:28Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240614-0007/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4271","reference_id":"RHSA-2024:4271","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4271"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4326","reference_id":"RHSA-2024:4326","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4326"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4505","reference_id":"RHSA-2024:4505","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4505"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4884","reference_id":"RHSA-2024:4884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5143","reference_id":"RHSA-2024:5143","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5143"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5144","reference_id":"RHSA-2024:5144","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5144"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5145","reference_id":"RHSA-2024:5145","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5145"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5147","reference_id":"RHSA-2024:5147","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5147"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5479","reference_id":"RHSA-2024:5479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5481","reference_id":"RHSA-2024:5481","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5481"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5482","reference_id":"RHSA-2024:5482","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5482"},{"reference_url":"https://usn.ubuntu.com/8108-1/","reference_id":"USN-8108-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8108-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-wtd8-vvzc-nybu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78"}],"aliases":["CVE-2024-30172","GHSA-m44j-cfrm-g8qc"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g6kq-7x7q-a3f2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/26540?format=json","vulnerability_id":"VCID-n35b-sxpc-ebd1","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-8885.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-8885.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-8885","reference_id":"","reference_type":"","scores":[{"value":"0.0044","scoring_system":"epss","scoring_elements":"0.63608","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-8885"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8885","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8885"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-java","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java"},{"reference_url":"https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.java","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.java"},{"reference_url":"https://github.com/bcgit/bc-java/commit/3790993df5d28f661a64439a8664343437ed3865","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/3790993df5d28f661a64439a8664343437ed3865"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8885","reference_id":"","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8885"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387790","reference_id":"2387790","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387790"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908885","reference_id":"CVE%E2%80%902025%E2%80%908885","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/S:P/R:U/RE:M/U:Amber"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-12T18:14:28Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908885"},{"reference_url":"https://github.com/advisories/GHSA-67mf-3cr5-8w23","reference_id":"GHSA-67mf-3cr5-8w23","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-67mf-3cr5-8w23"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-wtd8-vvzc-nybu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78"}],"aliases":["CVE-2025-8885","GHSA-67mf-3cr5-8w23"],"risk_score":2.9,"exploitability":"0.5","weighted_severity":"5.7","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-n35b-sxpc-ebd1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19011?format=json","vulnerability_id":"VCID-tw4p-n1bp-fbhf","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30171.json","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-30171.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-30171","reference_id":"","reference_type":"","scores":[{"value":"0.00139","scoring_system":"epss","scoring_elements":"0.33699","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-30171"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30171","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30171"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217"},{"reference_url":"https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0"},{"reference_url":"https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240614-0008","reference_id":"","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20240614-0008"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655","reference_id":"1070655","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276360","reference_id":"2276360","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2276360"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171","reference_id":"CVE-2024-30171","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30171"},{"reference_url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171","reference_id":"CVE%E2%80%902024%E2%80%9030171","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-19T17:18:15Z/"}],"url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171","reference_id":"CVE%E2%80%902024%E2%80%9030171","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-19T17:18:15Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171"},{"reference_url":"https://github.com/advisories/GHSA-v435-xc8x-wvr9","reference_id":"GHSA-v435-xc8x-wvr9","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v435-xc8x-wvr9"},{"reference_url":"https://www.bouncycastle.org/latest_releases.html","reference_id":"latest_releases.html","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-19T17:18:15Z/"}],"url":"https://www.bouncycastle.org/latest_releases.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20240614-0008/","reference_id":"ntap-20240614-0008","reference_type":"","scores":[{"value":"5.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-19T17:18:15Z/"}],"url":"https://security.netapp.com/advisory/ntap-20240614-0008/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4173","reference_id":"RHSA-2024:4173","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4173"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4271","reference_id":"RHSA-2024:4271","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4271"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4326","reference_id":"RHSA-2024:4326","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4326"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4505","reference_id":"RHSA-2024:4505","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4505"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4884","reference_id":"RHSA-2024:4884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5143","reference_id":"RHSA-2024:5143","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5143"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5144","reference_id":"RHSA-2024:5144","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5144"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5145","reference_id":"RHSA-2024:5145","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5145"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5147","reference_id":"RHSA-2024:5147","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5147"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5479","reference_id":"RHSA-2024:5479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5481","reference_id":"RHSA-2024:5481","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5481"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5482","reference_id":"RHSA-2024:5482","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5482"},{"reference_url":"https://usn.ubuntu.com/8108-1/","reference_id":"USN-8108-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8108-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-wtd8-vvzc-nybu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78"}],"aliases":["CVE-2024-30171","GHSA-v435-xc8x-wvr9"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tw4p-n1bp-fbhf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/30010?format=json","vulnerability_id":"VCID-wtd8-vvzc-nybu","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5598.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-5598.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-5598","reference_id":"","reference_type":"","scores":[{"value":"0.00022","scoring_system":"epss","scoring_elements":"0.06511","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-5598"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-java","reference_id":"","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-5598","reference_id":"","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-5598"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5598","reference_id":"","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5598"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134386","reference_id":"1134386","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134386"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458635","reference_id":"2458635","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2458635"},{"reference_url":"https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5","reference_id":"8692e6b2b191fc4aafa32545c7a78bdb9bf110c5","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T13:11:48Z/"}],"url":"https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5"},{"reference_url":"https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87","reference_id":"94abbd56413dfdac651fd878bc60253871ef5e87","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T13:11:48Z/"}],"url":"https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598","reference_id":"CVE%E2%80%902026%E2%80%905598","reference_type":"","scores":[{"value":"8.9","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T13:11:48Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598"},{"reference_url":"https://github.com/advisories/GHSA-p93r-85wp-75v3","reference_id":"GHSA-p93r-85wp-75v3","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-p93r-85wp-75v3"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12267","reference_id":"RHSA-2026:12267","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12269","reference_id":"RHSA-2026:12269","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12269"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18054","reference_id":"RHSA-2026:18054","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18054"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18055","reference_id":"RHSA-2026:18055","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18055"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:18059","reference_id":"RHSA-2026:18059","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:18059"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/373664?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.84","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.84"}],"aliases":["CVE-2026-5598","GHSA-p93r-85wp-75v3"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wtd8-vvzc-nybu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19005?format=json","vulnerability_id":"VCID-xu8s-qbh8-mybs","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-29857.json","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-29857.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2024-29857","reference_id":"","reference_type":"","scores":[{"value":"0.00252","scoring_system":"epss","scoring_elements":"0.48788","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-29857"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29857","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29857"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63"},{"reference_url":"https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f"},{"reference_url":"https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281"},{"reference_url":"https://security.netapp.com/advisory/ntap-20241206-0008","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20241206-0008"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655","reference_id":"1070655","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070655"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293028","reference_id":"2293028","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2293028"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857","reference_id":"CVE-2024-29857","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29857"},{"reference_url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857","reference_id":"CVE%E2%80%902024%E2%80%9029857","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-13T19:32:50Z/"}],"url":"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857","reference_id":"CVE%E2%80%902024%E2%80%9029857","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-13T19:32:50Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857"},{"reference_url":"https://github.com/advisories/GHSA-8xfc-gm6g-vgpv","reference_id":"GHSA-8xfc-gm6g-vgpv","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-8xfc-gm6g-vgpv"},{"reference_url":"https://www.bouncycastle.org/latest_releases.html","reference_id":"latest_releases.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-13T19:32:50Z/"}],"url":"https://www.bouncycastle.org/latest_releases.html"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4271","reference_id":"RHSA-2024:4271","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4271"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4326","reference_id":"RHSA-2024:4326","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4326"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4505","reference_id":"RHSA-2024:4505","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4505"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:4884","reference_id":"RHSA-2024:4884","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:4884"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5143","reference_id":"RHSA-2024:5143","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5143"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5144","reference_id":"RHSA-2024:5144","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5144"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5145","reference_id":"RHSA-2024:5145","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5145"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5147","reference_id":"RHSA-2024:5147","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5147"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5479","reference_id":"RHSA-2024:5479","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5479"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5481","reference_id":"RHSA-2024:5481","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5481"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:5482","reference_id":"RHSA-2024:5482","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:5482"},{"reference_url":"https://usn.ubuntu.com/8108-1/","reference_id":"USN-8108-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8108-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-wtd8-vvzc-nybu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.78"}],"aliases":["CVE-2024-29857","GHSA-8xfc-gm6g-vgpv"],"risk_score":3.4,"exploitability":"0.5","weighted_severity":"6.8","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xu8s-qbh8-mybs"}],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15524?format=json","vulnerability_id":"VCID-e5f5-vgc9-2kez","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33201.json","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-33201.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-33201","reference_id":"","reference_type":"","scores":[{"value":"0.00326","scoring_system":"epss","scoring_elements":"0.55956","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-33201"},{"reference_url":"https://bouncycastle.org/releasenotes.html#r1rv74","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bouncycastle.org/releasenotes.html#r1rv74"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33201","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33201"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/bcgit/bc-java","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java"},{"reference_url":"https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd"},{"reference_url":"https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33201","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33201"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230824-0008","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://security.netapp.com/advisory/ntap-20230824-0008"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040050","reference_id":"1040050","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040050"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215465","reference_id":"2215465","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215465"},{"reference_url":"https://bouncycastle.org","reference_id":"bouncycastle.org","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-04T15:47:56Z/"}],"url":"https://bouncycastle.org"},{"reference_url":"https://github.com/bcgit/bc-java/wiki/CVE-2023-33201","reference_id":"CVE-2023-33201","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-04T15:47:56Z/"}],"url":"https://github.com/bcgit/bc-java/wiki/CVE-2023-33201"},{"reference_url":"https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc","reference_id":"e8c409a8389c815ea3fda5e8b94c92fdfe583bcc","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-04T15:47:56Z/"}],"url":"https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc"},{"reference_url":"https://github.com/advisories/GHSA-hr8g-6v94-x4m9","reference_id":"GHSA-hr8g-6v94-x4m9","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-hr8g-6v94-x4m9"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html","reference_id":"msg00000.html","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-04T15:47:56Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20230824-0008/","reference_id":"ntap-20230824-0008","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-04T15:47:56Z/"}],"url":"https://security.netapp.com/advisory/ntap-20230824-0008/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:3954","reference_id":"RHSA-2023:3954","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:3954"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5147","reference_id":"RHSA-2023:5147","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5147"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5165","reference_id":"RHSA-2023:5165","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5165"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5484","reference_id":"RHSA-2023:5484","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5484"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5485","reference_id":"RHSA-2023:5485","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5485"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5486","reference_id":"RHSA-2023:5486","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5486"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:5488","reference_id":"RHSA-2023:5488","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:5488"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7482","reference_id":"RHSA-2023:7482","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7482"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7483","reference_id":"RHSA-2023:7483","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7483"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7484","reference_id":"RHSA-2023:7484","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7484"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7486","reference_id":"RHSA-2023:7486","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7486"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7488","reference_id":"RHSA-2023:7488","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7488"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7669","reference_id":"RHSA-2023:7669","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7669"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:7678","reference_id":"RHSA-2023:7678","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:7678"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:0278","reference_id":"RHSA-2024:0278","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:0278"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:1353","reference_id":"RHSA-2024:1353","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:1353"},{"reference_url":"https://access.redhat.com/errata/RHSA-2024:3527","reference_id":"RHSA-2024:3527","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2024:3527"},{"reference_url":"https://usn.ubuntu.com/8108-1/","reference_id":"USN-8108-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8108-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/381414?format=json","purl":"pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.74","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bgde-gcja-k7ez"},{"vulnerability":"VCID-bmbd-7t3k-3kga"},{"vulnerability":"VCID-g6kq-7x7q-a3f2"},{"vulnerability":"VCID-n35b-sxpc-ebd1"},{"vulnerability":"VCID-tw4p-n1bp-fbhf"},{"vulnerability":"VCID-wtd8-vvzc-nybu"},{"vulnerability":"VCID-xu8s-qbh8-mybs"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.74"}],"aliases":["CVE-2023-33201","GHSA-hr8g-6v94-x4m9"],"risk_score":2.0,"exploitability":"0.5","weighted_severity":"4.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-e5f5-vgc9-2kez"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.bouncycastle/bcprov-jdk15to18@1.74"}