Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67
purl pkg:maven/org.bouncycastle/bcprov-jdk15on@1.67
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.6
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-4h8f-2wvx-gg5w
Aliases:
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … There are no reported fixed by versions.
GHSA-hr8g-6v94-x4m9
Aliases:
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability Bouncy Castle provides the `X509LDAPCertStoreSpi.java` class which can be used in conjunction with … There are no reported fixed by versions.
CVE-2024-34447
Aliases:
GHSA-4h8f-2wvx-gg5w
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … There are no reported fixed by versions.
GHSA-v435-xc8x-wvr9
Aliases:
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle … There are no reported fixed by versions.
GHSA-8xfc-gm6g-vgpv
Aliases:
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-73xv-w5gp-frxh
Logic error in Legion of the Bouncy Castle BC Java An issue was discovered in Legion of the Bouncy Castle … CVE-2020-28052