Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69
purl pkg:maven/org.bouncycastle/bcprov-jdk15on@1.69
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.6
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-4h8f-2wvx-gg5w
Aliases:
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … There are no reported fixed by versions.
GHSA-hr8g-6v94-x4m9
Aliases:
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability Bouncy Castle provides the `X509LDAPCertStoreSpi.java` class which can be used in conjunction with … There are no reported fixed by versions.
CVE-2024-34447
Aliases:
GHSA-4h8f-2wvx-gg5w
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For … There are no reported fixed by versions.
GHSA-v435-xc8x-wvr9
Aliases:
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle … There are no reported fixed by versions.
GHSA-8xfc-gm6g-vgpv
Aliases:
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … There are no reported fixed by versions.
This package is not known to fix any advisories.