VulnerableCode Package Details - pkg:maven/org.bouncycastle/bcprov-jdk18on@1.74

Vulnerabilities affecting this package (27)

Advisory	Summary	Fixed in package version
GHSA-67mf-3cr5-8w23 Aliases: CVE-2025-8885	Bouncy Castle for Java on All (API modules) allows Excessive Allocation A resource allocation vulnerability exists in Bouncy Castle for …	1.78 Vulnerable
GHSA-4h8f-2wvx-gg5w Aliases: CVE-2024-34447	Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For …	1.78 Vulnerable
GHSA-c3fc-8qff-9hwx Aliases: CVE-2026-0636	Bouncy Castle has an LDAP injection Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in …	1.84 Vulnerable
CVE-2024-34447 Aliases: GHSA-4h8f-2wvx-gg5w	Bouncy Castle Java Cryptography API vulnerable to DNS poisoning An issue was discovered in the Bouncy Castle Crypto Package For …	There are no reported fixed by versions.
CVE-2026-0636 Aliases: GHSA-c3fc-8qff-9hwx	Bouncy Castle has an LDAP injection Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in …	There are no reported fixed by versions.
GHSA-v435-xc8x-wvr9 Aliases: CVE-2024-30171	Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle …	1.78 Vulnerable 1.78 Vulnerable
GHSA-m44j-cfrm-g8qc Aliases: CVE-2024-30172	Bouncy Castle crafted signature and public key can be used to trigger an infinite loop An issue was discovered in …	1.78 Vulnerable 1.78 Vulnerable
GHSA-8xfc-gm6g-vgpv Aliases: CVE-2024-29857	Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs …	1.78 Vulnerable 1.78 Vulnerable
GHSA-574f-3g2m-x479 Aliases: CVE-2025-14813	Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks The GOST 28147-2015 CTR mode implementation (`G3413CTRBlockCipher`) …	1.80.2 Vulnerable 1.84 Vulnerable 1.80.2 Vulnerable
GHSA-qp49-qgx5-5m26 Aliases: CVE-2026-13506	Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing …	1.85 Not vulnerable
GHSA-9pwp-9qqc-pr26 Aliases: CVE-2026-8763	Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name …	1.85 Not vulnerable
CVE-2026-14682	Possible OOM from unbounded up-front allocation on a definite-length read Affects Bouncy Castle for Java before 1.85. Definite-length ASN.1 parsing …	There are no reported fixed by versions.
CVE-2026-12803	KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) Affects Bouncy Castle for Java before 1.85. …	There are no reported fixed by versions.
CVE-2025-14813 Aliases: GHSA-574f-3g2m-x479	Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks The GOST 28147-2015 CTR mode implementation (`G3413CTRBlockCipher`) …	1.80.2 Vulnerable 1.81.1 Vulnerable 1.80.2 Vulnerable 1.81.1 Vulnerable 1.80.2 Vulnerable 1.81.1 Vulnerable
CVE-2026-12185	BKS/UBER keystore allocates from untrusted lengths before integrity check Affects Bouncy Castle for Java before 1.85. BcKeyStoreSpi.engineLoad() parses every keystore …	There are no reported fixed by versions.
CVE-2026-59650	MTI/A0 DH agreement exponentiates unvalidated peer value Affects Bouncy Castle for Java before 1.85. DHAgreement, implementing the MTI/A0 two-pass variant, …	There are no reported fixed by versions.
CVE-2026-58062	Stapled OCSP response accepted without binding to the checked certificate Affects Bouncy Castle for Java before 1.85. In the stapled …	There are no reported fixed by versions.
CVE-2026-58061	CCM-family modes write plaintext to caller buffer before tag check Affects Bouncy Castle for Java before 1.85. CCMBlockCipher.processPacket(), and the …	There are no reported fixed by versions.
CVE-2026-13506 Aliases: GHSA-qp49-qgx5-5m26	Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing …	There are no reported fixed by versions.
CVE-2026-59651	BKS keystore accepts legacy version with 16-bit integrity MAC key Affects Bouncy Castle for Java before 1.85. BcKeyStoreSpi.engineLoad() accepts keystore …	There are no reported fixed by versions.
CVE-2026-8763 Aliases: GHSA-9pwp-9qqc-pr26	Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI In Bouncy Castle for Java before 1.85, Name …	There are no reported fixed by versions.
CVE-2026-13586	PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affects Bouncy Castle for Java before 1.85. PKCS12KeyStoreSpi and PKCS12PBMAC1KeyStoreSpi derived integrity-MAC …	There are no reported fixed by versions.
CVE-2026-58060	HSS public-key level count unbounded, enabling huge allocation on verify Affects Bouncy Castle for Java before 1.85. HSS/LMS parsing reads …	There are no reported fixed by versions.
CVE-2026-12816	IESEngine stream-mode MAC forgery via length-dependent KDF split Affects Bouncy Castle for Java before 1.85. When IESEngine is initialised without …	There are no reported fixed by versions.
CVE-2026-12860	RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path Affects Bouncy Castle for Java before 1.85. RSADigestSigner.verifySignature() mis-computes …	There are no reported fixed by versions.
CVE-2026-58059	Quadratic-time escaping when stringifying X.500 distinguished names Affects Bouncy Castle for Java before 1.85. IETFUtils.valueToString() escapes special characters by inserting …	There are no reported fixed by versions.
CVE-2026-58063	BCFKS keystore load honours unbounded KDF cost from untrusted file Affects Bouncy Castle for Java before 1.85. BcFKSKeyStoreSpi.engineLoad() takes the …	There are no reported fixed by versions.

Next non-vulnerable version	1.85
Latest non-vulnerable version	1.85
Risk score	4.2