Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.66
purl pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.66
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.9
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-wg6q-6289-32hp
Aliases:
CVE-2026-5588
Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules : Use … There are no reported fixed by versions.
CVE-2023-33202

Uncontrolled Resource Consumption Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy … There are no reported fixed by versions.
CVE-2025-8916
Aliases:
GHSA-4cx2-fc23-5wg6
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, … There are no reported fixed by versions.
CVE-2026-5588
Aliases:
GHSA-wg6q-6289-32hp
Bouncy Castle Crypto Package For Java: Use of a Broken or Risky Cryptographic Algorithm vulnerability in bcpkix modules : Use … There are no reported fixed by versions.
GHSA-4cx2-fc23-5wg6
Aliases:
CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bcpkix, … There are no reported fixed by versions.
This package is not known to fix any advisories.