Search for packages
purl | pkg:maven/org.bouncycastle/bc-fips@1.0.2 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-2u2e-ux7t-aaar
Aliases: CVE-2020-15522 GHSA-6xx3-rg99-gc3p |
Timing based private key exposure in Bouncy Castle |
Affected by 2 other vulnerabilities. |
VCID-76re-2kv5-aaak
Aliases: CVE-2022-45146 GHSA-68m8-v89j-7j2p |
Garbage collection issue in BC-FJA in Java 13 and later |
Affected by 1 other vulnerability. |
VCID-p1ac-tc9q-aaaa
Aliases: CVE-2024-29857 GHSA-8xfc-gm6g-vgpv |
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-x6rq-m1e2-aaab | Observable Differences in Behavior to Error Inputs in Bouncy Castle |
CVE-2020-26939
GHSA-72m5-fvvv-55m6 |