Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.66
purl pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.66
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.6
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-73xv-w5gp-frxh
Aliases:
CVE-2020-28052
Logic error in Legion of the Bouncy Castle BC Java An issue was discovered in Legion of the Bouncy Castle …
1.67
Vulnerable
GHSA-hr8g-6v94-x4m9
Aliases:
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability Bouncy Castle provides the `X509LDAPCertStoreSpi.java` class which can be used in conjunction with … There are no reported fixed by versions.
GHSA-wjxj-5m7g-mg7q
Aliases:
CVE-2023-33202
Bouncy Castle Denial of Service (DoS) Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-6xx3-rg99-gc3p
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA … CVE-2020-15522