bouncycastle
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 80 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 30, 2009 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MLS membership checks compare a uint32 leaf_index as signed, admitting an out-of-range sender
Quadratic-time escaping when converting X.509 distinguished names to strings
Unbounded HSS public key level count allows huge array allocation during signature verification
Name constraints bypass via trailing dot in rfc822Name, dNSName and URI hosts
CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
Unbounded ASN.1 nesting depth causes process-terminating stack overflow
Unbounded PBE iteration count when decrypting PKCS#8 private keys
Name Constraints bypass: directoryName constraint matched at any position in the DN instead of as a prefix
URI name constraints checked against a mis-parsed host
PKCS#12 key derivation loops about 2^32 times on a zero or negative iteration count
Monitor bouncycastle in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.