Search for packages
| purl | pkg:maven/org.bouncycastle/bctls-jdk15to18@1.77 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-67mf-3cr5-8w23
Aliases: CVE-2025-8885 |
Bouncy Castle for Java on All (API modules) allows Excessive Allocation A resource allocation vulnerability exists in Bouncy Castle for … |
Vulnerable |
|
GHSA-v435-xc8x-wvr9
Aliases: CVE-2024-30171 |
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") An issue was discovered in Bouncy Castle … |
Vulnerable Vulnerable |
|
GHSA-m44j-cfrm-g8qc
Aliases: CVE-2024-30172 |
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop An issue was discovered in … |
Vulnerable Vulnerable |
|
GHSA-8xfc-gm6g-vgpv
Aliases: CVE-2024-29857 |
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. An issue was discovered in ECCurve.java and ECCurve.cs … |
Vulnerable Vulnerable |
|
CVE-2026-59638
|
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in Affects Bouncy Castle for Java before 1.85. HostnameUtil gates the … | There are no reported fixed by versions. |
|
CVE-2026-59646
|
DTLS handshake reassembler allocates buffer from unchecked 24-bit length Affects Bouncy Castle for Java before 1.85. DTLSReliableHandshake.processRecord() allocates a reassembly … | There are no reported fixed by versions. |