Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.bouncycastle:bcprov-jdk15

maven

The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5.

View on www.bouncycastle.org · View on repo1.maven.org

High Security Advisories for org.bouncycastle:bcprov-jdk15 in maven Clear Filters

High
over 4 years ago

Logic error in Legion of the Bouncy Castle BC Java MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTczeHYtdzVncC1mcnho

maven org.bouncycastle:bcprov-ext-jdk16, org.bouncycastle:bcprov-jdk16, org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-ext-jdk15on, org.bouncycastle:bcprov-jdk15on, org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk15to18
High
about 7 years ago

In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2aGotOThyNi00MjRo

maven org.bouncycastle:bcprov-jdk15, org.bouncycastle:bcprov-jdk14

Filter by Severity

High 2 Moderate 2