Bouncycastle Legion Of The Bouncy Castle Java Crytography Api vulnerabilities

1 vulnerability

Known vulnerabilities in Bouncycastle Legion Of The Bouncy Castle Java Crytography Api, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2016-1000338chainguard · eco-java-gradle-1.11 +43 morechainguard eco-java-gradle-1.11In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.EPSS1.79%