Vulnerabilities

Last updated 48 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.bouncycastle:bc-fips Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization. High Risk 8.0 1 month ago 9 days ago
org.bouncycastle:bc-fips Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI Critical 9.1 1 month ago 9 days ago
org.bouncycastle:bc-fips Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard High Risk 7.5 1 month ago 9 days ago
org.bouncycastle:bc-fips Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound High Risk 8.0 1 month ago 9 days ago
org.bouncycastle:bc-fips Bouncy Castle Vulnerable to Uncontrolled Resource Consumption Medium Risk 6.0 11 months ago 18 days ago
org.bouncycastle:bc-fips Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability Low Risk 3.0 1 year ago 18 days ago
org.bouncycastle:bc-fips Bouncy Castle for Java on All (API modules) allows Excessive Allocation Medium Risk 6.0 1 year ago 18 days ago
org.bouncycastle:bc-fips Garbage collection issue in BC-FJA in Java 13 and later Medium Risk 5.5 3 years ago 18 days ago
org.bouncycastle:bc-fips Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. Medium Risk 5.3 2 years ago 18 days ago
org.bouncycastle:bc-fips Timing based private key exposure in Bouncy Castle Medium Risk 5.1 5 years ago 18 days ago
org.bouncycastle:bc-fips Bouncy Castle for Java has Out-of-Bounds Write Vulnerability Low Risk 3.0 1 year ago 1 year ago
org.bouncycastle:bc-fips Bouncy Castle for Java has Uncontrolled Resource Consumption Vulnerability Medium Risk 6.0 1 year ago 1 year ago
org.bouncycastle:bc-fips Observable Differences in Behavior to Error Inputs in Bouncy Castle Medium Risk 5.3 5 years ago 1 year ago