Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.58
purl pkg:maven/org.bouncycastle/bcprov-ext-jdk15on@1.58
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.5
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-72m5-fvvv-55m6
Aliases:
CVE-2020-26939
Observable Differences in Behavior to Error Inputs in Bouncy Castle In Legion of the Bouncy Castle BC before 1.55 and …
1.61
Vulnerable
GHSA-6xx3-rg99-gc3p
Aliases:
CVE-2020-15522
Timing based private key exposure in Bouncy Castle Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA …
1.66
Vulnerable
GHSA-hr8g-6v94-x4m9
Aliases:
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability Bouncy Castle provides the `X509LDAPCertStoreSpi.java` class which can be used in conjunction with … There are no reported fixed by versions.
GHSA-wjxj-5m7g-mg7q
Aliases:
CVE-2023-33202
Bouncy Castle Denial of Service (DoS) Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue … There are no reported fixed by versions.
This package is not known to fix any advisories.