org.bouncycastle:bcprov-jdk18on
Maven9 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.bouncycastle:bcprov-jdk18onpage 1 of 1
- CVE-2023-33201MEDIUMCVSS 5.3EG 5.3✓ Fixed in 1.742023-07-05
vulnerable: 1.71, 1.71.1, 1.72, 1.73
Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation …
- CVE-2023-33202MEDIUMCVSS 5.5EG 5.5✓ Fixed in 1.732023-11-23
vulnerable: 1.71, 1.71.1, 1.72
Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 enc…
- CVE-2024-29857HIGHCVSS 7.5EG 7.5✓ Fixed in 1.782024-05-14
vulnerable: 1.71 ... 1.77 (8 versions)
An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can …
- CVE-2024-30171MEDIUMCVSS 5.9EG 5.9✓ Fixed in 1.782024-05-14
vulnerable: 1.71 ... 1.77 (8 versions)
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
- CVE-2024-30172HIGHCVSS 7.5EG 7.5✓ Fixed in 1.782024-05-14
vulnerable: 1.73, 1.74, 1.75, 1.76, 1.77
An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key.
- CVE-2024-34447HIGHCVSS 7.5EG 7.5✓ Fixed in 1.782024-05-03
vulnerable: 1.71 ... 1.77 (8 versions)
An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an…
- CVE-2025-8885NONECVSS 0.0EG 0.0✓ Fixed in 1.782025-08-12
vulnerable: 1.71 ... 1.77 (8 versions)
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerabil…
- CVE-2026-0636MEDIUMCVSS 5.5EG 5.5✓ Fixed in 1.842026-04-15
vulnerable: 1.74 ... 1.83 (11 versions)
Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreHel…
- CVE-2026-5598HIGHCVSS 8.9EG 8.9✓ Fixed in 1.842026-04-15
vulnerable: 1.71 ... 1.83 (15 versions)
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, fro…
Check whether org.bouncycastle:bcprov-jdk18on is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.bouncycastle:bcprov-jdk18on CVEs against the assets you own.
Start Free Scan →