Skip to main content
FOSSA Logo
Skip to package details

org.bouncycastle:bcprov-jdk15on

Maven2.7k GitHub stars

v1.70 · Dec 2021 · License: unresolved in metadata

Install format
<dependency>
  <groupId>org.bouncycastle</groupId>
  <artifactId>bcprov-jdk15on</artifactId>
  <version>1.70</version>
</dependency>
implementation("org.bouncycastle:bcprov-jdk15on:1.70")
  • 5 known CVEs (4 in v1.70)
  • 10k known dependents
  • ★ 2.7k
  • 26 versions

Description

Bouncy Castle Java Distribution (Mirror)

Licenses

Declared license

License: unresolved in metadata

Transitive dependency licenses

org.bouncycastle:bcprov-jdk15on declares no runtime dependencies, so its license exposure is limited to its own package, which has no resolvable declared license.

This view is derived from declared package metadata, and a full FOSSA scan detects licenses that declared metadata misses. Scan free.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.

Need org.bouncycastle:bcprov-jdk15on approved? Get the full license and vulnerability report for your codebase. Scan free.

Scan free

Vulnerabilities

CVE-linked advisories
Affected rangeCVECWECVSSEPSS
<1.78CVE-2024-30171CWE-2035.9 Medium severity advisories0.00901
>=1.61 <1.78CVE-2024-34447CWE-2975.9 Medium severity advisories0.00770
CVE-2023-33202CWE-4005.5 Medium severity advisories0.01020
<1.78CVE-2024-29857CWE-125, CWE-4005.3 Medium severity advisories0.01100
>=1.49 <=1.70CVE-2023-33201CWE-2955.3 Medium severity advisories0.00772

Remediation

Fix versions
CVEIssueImpactedFixed in
CVE-2024-30171Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")<1.781.78
CVE-2024-34447Bouncy Castle Java Cryptography API vulnerable to DNS poisoning>=1.61 <1.781.78
CVE-2024-29857Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.<1.781.78

Find and fix org.bouncycastle:bcprov-jdk15on issues across your dependencies.

Scan free

Version history

Published versions
VersionPublished
1.70Dec 2021
1.69Jun 2021
1.68Dec 2020
1.67Nov 2020
1.66Jul 2020
1.65.01May 2020
1.65Apr 2020
1.64Oct 2019
1.63Sep 2019
1.62Jun 2019
1.61Feb 2019
1.60Jul 2018
1.59Jan 2018
1.58Aug 2017
1.57May 2017
1.56Dec 2016
1.55Aug 2016
1.54Dec 2015
1.53Oct 2015
1.52Mar 2015
1.51Jul 2014
1.50Dec 2013
1.49Jun 2013
1.48Feb 2013
1.47Mar 2012
1 older release
Older published versions
VersionPublished
1.46Mar 2012

Dependents

  • org.bouncycastle:bcpkix-jdk15on

Based on what each package declares in its published metadata. The dependencies your build actually installs can differ, and a FOSSA scan of your project resolves the full tree.

Popularity

Known dependents in this corpus
9,983
GitHub stars
2.7k
OpenSSF score
6.4 / 10

FAQ

What is the latest version of org.bouncycastle:bcprov-jdk15on?
The latest version of org.bouncycastle:bcprov-jdk15on is 1.70, published December 2021.
What license is org.bouncycastle:bcprov-jdk15on under?
org.bouncycastle:bcprov-jdk15on has no resolvable license in its published metadata. FOSSA's full scan detects licenses that declared metadata misses.
Does org.bouncycastle:bcprov-jdk15on have known vulnerabilities?
org.bouncycastle:bcprov-jdk15on has 5 known CVE-linked advisories across its published versions; 4 affect the latest version, v1.70.
How do I install org.bouncycastle:bcprov-jdk15on?
Add org.bouncycastle:bcprov-jdk15on to your pom.xml as a dependency on org.bouncycastle:bcprov-jdk15on:1.70.
How do I generate an SBOM that includes org.bouncycastle:bcprov-jdk15on?
FOSSA's SBOM generator produces SPDX or CycloneDX output for a codebase that includes org.bouncycastle:bcprov-jdk15on. Generate an SPDX or CycloneDX SBOM free.

Dependency graph and package metadata from deps.dev (Google Open Source Insights), used under CC BY 4.0.

Vulnerability data from the Open Source Vulnerability (OSV) database, including the GitHub Advisory Database and the PyPI Advisory Database, used under CC BY 4.0. Only CVE-linked advisories are shown.

EPSS scores from the Exploit Prediction Scoring System, maintained by the EPSS Special Interest Group at FIRST.

Repository stars from the GitHub API.

OpenSSF Scorecard results from deps.dev.

License and vulnerability information on this page is derived from public package metadata and public advisory databases. It is not legal advice, and it reflects the top-level declared license only. Verify the license and terms of any software for your own needs.