org.bouncycastle:bctls-fips
Maven3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.bouncycastle:bctls-fipspage 1 of 1
- CVE-2024-30171MEDIUMCVSS 5.9EG 5.9✓ Fixed in 1.0.192024-05-14
vulnerable: 1.0.0 ... 1.0.9 (29 versions)
An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.
- CVE-2024-34447HIGHCVSS 7.5EG 7.5✓ Fixed in 1.0.192024-05-03
vulnerable: 1.0.0 ... 1.0.9 (29 versions)
An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78, BC Java (LTS) 2.73.6) and before BC FIPS TLS Java 1.0.19. When endpoint identification is enabled in the BCJSSE and an…
- CVE-2025-9341MEDIUMCVSS 5.9EG 0.0✓ Fixed in 2.73.82025-08-22
vulnerable: 2.73.7
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) al…
Check whether org.bouncycastle:bctls-fips is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.bouncycastle:bctls-fips CVEs against the assets you own.
Start Free Scan →