[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2016-1000342":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":27,"aliases":28,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":46,"related":47,"reserved_at":9,"published_at":50,"modified_at":51,"state":52,"summary":53,"references_raw":62,"kevs":121,"epss":122,"epss_history":125,"metrics":384,"affected":396},"CVE-2016-1000342","In the Bouncy Castle JCE Provider version 1.55 and earlier ECDSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in some cases may allow the introduction of 'invisible' data into a signed structure.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","weakness","Draft","Base",[19,23],{"id":20,"name":21,"techniques":22},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":24,"name":25,"techniques":26},"CAPEC-475","Signature Spoofing by Improper Validation",[],[],[29],"GHSA-qcj7-g2j5-g7r3",[],[32,34,36,38,40,42,44],{"_key":33},"UBUNTU-CVE-2016-1000342",{"_key":35},"OPENSUSE-SU-2024:10661-1",{"_key":37},"DLA-1418-1",{"_key":39},"MGASA-2018-0376",{"_key":41},"USN-3727-1",{"_key":43},"DEBIAN-CVE-2016-1000342",{"_key":45},"RHSA-2018:2927",[],[48,49],{"_key":35},{"_key":39},"2018-06-04T13:00:00.000Z","2024-08-06T03:55:27.546Z","Modified",{"cisa_kev":54,"cisa_ransomware":54,"cisa_vendor":9,"epss_severity":55,"epss_score":56,"severity":57,"severity_score":58,"severity_version":59,"severity_source":60,"severity_vector":61,"severity_status":52},false,"low",0.00471,"high",7.5,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",[63,73,79,84,88,93,98,103,108,113,117],{"url":64,"sources":65,"tags":68},"https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html",[66,60,67],"cve.org","osv_maven",[69,70,71,72],"Mailing List","X Refsource MLIST","Third Party Advisory","WEB",{"url":74,"sources":75,"tags":76},"https://access.redhat.com/errata/RHSA-2018:2669",[66,60,67],[77,78,72],"Vendor Advisory","X Refsource REDHAT",{"url":80,"sources":81,"tags":82},"https://usn.ubuntu.com/3727-1/",[66,60],[77,83],"X Refsource UBUNTU",{"url":85,"sources":86,"tags":87},"https://access.redhat.com/errata/RHSA-2018:2927",[66,60,67],[77,78,72],{"url":89,"sources":90,"tags":91},"https://www.oracle.com/security-alerts/cpuoct2020.html",[66,60,67],[92,72],"X Refsource MISC",{"url":94,"sources":95,"tags":96},"https://security.netapp.com/advisory/ntap-20181127-0004/",[66,60],[97],"X Refsource CONFIRM",{"url":99,"sources":100,"tags":101},"https://github.com/bcgit/bc-java/commit/843c2e60f67d71faf81d236f448ebbe56c62c647#diff-25c3c78db788365f36839b3f2d3016b9",[66,60,67],[97,102,71,72],"Patch",{"url":104,"sources":105,"tags":106},"https://nvd.nist.gov/vuln/detail/CVE-2016-1000342",[67],[107],"Advisory",{"url":109,"sources":110,"tags":111},"https://github.com/bcgit/bc-java",[67],[112],"PACKAGE",{"url":114,"sources":115,"tags":116},"https://security.netapp.com/advisory/ntap-20181127-0004",[67],[72],{"url":118,"sources":119,"tags":120},"https://usn.ubuntu.com/3727-1",[67],[72],[],{"date":123,"score":56,"percentile":124},"2026-06-04",0.64951,[126,129,132,135,137,140,143,145,148,151,154,157,160,163,165,168,171,174,177,180,182,185,188,191,194,197,200,203,206,209,212,215,218,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,266,269,272,275,278,281,283,286,289,292,295,298,301,303,306,309,312,315,318,320,322,324,327,329,332,335,338,341,343,346,349,352,355,358,361,364,367,369,372,376,378,381],{"date":127,"score":56,"percentile":128},"2025-11-04",0.63763,{"date":130,"score":56,"percentile":131},"2025-11-05",0.63745,{"date":133,"score":56,"percentile":134},"2025-11-06",0.63751,{"date":136,"score":56,"percentile":128},"2025-11-07",{"date":138,"score":56,"percentile":139},"2025-11-08",0.63766,{"date":141,"score":56,"percentile":142},"2025-11-09",0.6376,{"date":144,"score":56,"percentile":131},"2025-11-10",{"date":146,"score":56,"percentile":147},"2025-11-11",0.63756,{"date":149,"score":56,"percentile":150},"2025-11-12",0.63776,{"date":152,"score":56,"percentile":153},"2025-11-13",0.63782,{"date":155,"score":56,"percentile":156},"2025-11-14",0.63791,{"date":158,"score":56,"percentile":159},"2025-11-15",0.63787,{"date":161,"score":56,"percentile":162},"2025-11-16",0.63777,{"date":164,"score":56,"percentile":150},"2025-11-17",{"date":166,"score":56,"percentile":167},"2025-11-18",0.61962,{"date":169,"score":56,"percentile":170},"2025-11-19",0.61978,{"date":172,"score":56,"percentile":173},"2025-11-20",0.61967,{"date":175,"score":56,"percentile":176},"2025-11-21",0.63788,{"date":178,"score":56,"percentile":179},"2025-11-22",0.63795,{"date":181,"score":56,"percentile":150},"2025-11-23",{"date":183,"score":56,"percentile":184},"2025-11-24",0.63769,{"date":186,"score":56,"percentile":187},"2025-11-25",0.63771,{"date":189,"score":56,"percentile":190},"2025-11-26",0.63774,{"date":192,"score":56,"percentile":193},"2025-11-27",0.63779,{"date":195,"score":56,"percentile":196},"2025-11-28",0.63757,{"date":198,"score":56,"percentile":199},"2025-11-29",0.63727,{"date":201,"score":56,"percentile":202},"2025-11-30",0.6372,{"date":204,"score":56,"percentile":205},"2025-12-01",0.63893,{"date":207,"score":56,"percentile":208},"2025-12-02",0.6391,{"date":210,"score":56,"percentile":211},"2025-12-03",0.63911,{"date":213,"score":56,"percentile":214},"2025-12-04",0.63735,{"date":216,"score":56,"percentile":217},"2025-12-05",0.63747,{"date":219,"score":56,"percentile":217},"2025-12-06",{"date":221,"score":56,"percentile":222},"2025-12-07",0.6374,{"date":224,"score":56,"percentile":225},"2025-12-08",0.63748,{"date":227,"score":56,"percentile":228},"2025-12-09",0.63781,{"date":230,"score":56,"percentile":231},"2025-12-10",0.63827,{"date":233,"score":56,"percentile":234},"2025-12-11",0.63844,{"date":236,"score":56,"percentile":237},"2025-12-12",0.63863,{"date":239,"score":56,"percentile":240},"2025-12-13",0.63869,{"date":242,"score":56,"percentile":243},"2025-12-14",0.63867,{"date":245,"score":56,"percentile":246},"2025-12-15",0.63862,{"date":248,"score":56,"percentile":249},"2025-12-16",0.63877,{"date":251,"score":56,"percentile":252},"2025-12-17",0.63891,{"date":254,"score":56,"percentile":255},"2025-12-18",0.63928,{"date":257,"score":56,"percentile":258},"2025-12-19",0.63944,{"date":260,"score":56,"percentile":261},"2025-12-20",0.63941,{"date":263,"score":264,"percentile":265},"2025-12-21",0.00468,0.63805,{"date":267,"score":264,"percentile":268},"2025-12-22",0.63798,{"date":270,"score":264,"percentile":271},"2025-12-23",0.6381,{"date":273,"score":264,"percentile":274},"2025-12-24",0.63816,{"date":276,"score":264,"percentile":277},"2025-12-25",0.63841,{"date":279,"score":264,"percentile":280},"2025-12-26",0.63843,{"date":282,"score":264,"percentile":205},"2025-12-27",{"date":284,"score":264,"percentile":285},"2025-12-28",0.6382,{"date":287,"score":264,"percentile":288},"2025-12-29",0.63808,{"date":290,"score":264,"percentile":291},"2025-12-30",0.63824,{"date":293,"score":264,"percentile":294},"2025-12-31",0.63849,{"date":296,"score":264,"percentile":297},"2026-01-01",0.64039,{"date":299,"score":264,"percentile":300},"2026-01-02",0.64025,{"date":302,"score":264,"percentile":300},"2026-01-03",{"date":304,"score":264,"percentile":305},"2026-01-04",0.63847,{"date":307,"score":264,"percentile":308},"2026-01-05",0.63842,{"date":310,"score":264,"percentile":311},"2026-01-06",0.63836,{"date":313,"score":264,"percentile":314},"2026-01-07",0.63857,{"date":316,"score":264,"percentile":317},"2026-01-08",0.63879,{"date":319,"score":264,"percentile":317},"2026-01-09",{"date":321,"score":264,"percentile":249},"2026-01-10",{"date":323,"score":264,"percentile":243},"2026-01-11",{"date":325,"score":264,"percentile":326},"2026-01-12",0.63848,{"date":328,"score":264,"percentile":294},"2026-01-13",{"date":330,"score":264,"percentile":331},"2026-01-14",0.63886,{"date":333,"score":264,"percentile":334},"2026-01-15",0.63901,{"date":336,"score":264,"percentile":337},"2026-01-16",0.6392,{"date":339,"score":264,"percentile":340},"2026-01-17",0.63909,{"date":342,"score":264,"percentile":334},"2026-01-18",{"date":344,"score":264,"percentile":345},"2026-01-19",0.63888,{"date":347,"score":264,"percentile":348},"2026-01-20",0.63903,{"date":350,"score":264,"percentile":351},"2026-01-21",0.63905,{"date":353,"score":264,"percentile":354},"2026-01-22",0.63912,{"date":356,"score":264,"percentile":357},"2026-01-23",0.63942,{"date":359,"score":264,"percentile":360},"2026-01-24",0.63946,{"date":362,"score":264,"percentile":363},"2026-01-25",0.63913,{"date":365,"score":264,"percentile":366},"2026-01-26",0.639,{"date":368,"score":264,"percentile":208},"2026-01-27",{"date":370,"score":264,"percentile":371},"2026-01-28",0.63919,{"date":373,"score":374,"percentile":375},"2026-01-29",0.00291,0.52086,{"date":377,"score":374,"percentile":375},"2026-01-30",{"date":379,"score":374,"percentile":380},"2026-01-31",0.52093,{"date":382,"score":374,"percentile":383},"2026-02-01",0.52235,[385,394],{"source":60,"cvss_v2_0":386,"cvss_v3_0":391,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":387,"baseSeverity":9,"vectorString":388,"impactScore":389,"exploitabilityScore":390},5,"AV:N/AC:L/Au:N/C:N/I:P/A:N",2.9,10,{"baseScore":58,"baseSeverity":392,"vectorString":61,"impactScore":393,"exploitabilityScore":390},"HIGH",6,{"source":67,"cvss_v2_0":9,"cvss_v3_0":395,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":58,"baseSeverity":9,"vectorString":61,"impactScore":393,"exploitabilityScore":390},[397,408,416,428,433],{"ecosystem":9,"name":398,"vendor":399,"product":398,"cpe_part":400,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":401},"bc-java","bouncycastle","a",[402],{"version":403,"is_range":404,"range_type":405,"version_start":9,"version_start_type":9,"version_end":406,"version_end_type":407,"fixed_in":9},"lte1.55",true,"cpe","1.55","including",{"ecosystem":9,"name":409,"vendor":410,"product":411,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":413},"debian linux","debian","debian_linux","o",[414],{"version":415,"is_range":54,"range_type":405,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"ecosystem":417,"name":418,"vendor":419,"product":420,"cpe_part":9,"purl_type":421,"purl_namespace":419,"purl_name":420,"source":9,"versions":422},"Maven","org.bouncycastle:bcprov-jdk14","org.bouncycastle","bcprov-jdk14","maven",[423],{"version":424,"is_range":404,"range_type":425,"version_start":9,"version_start_type":9,"version_end":426,"version_end_type":427,"fixed_in":9},"lt1_56","ecosystem","1.56","excluding",{"ecosystem":417,"name":429,"vendor":419,"product":430,"cpe_part":9,"purl_type":421,"purl_namespace":419,"purl_name":430,"source":9,"versions":431},"org.bouncycastle:bcprov-jdk15","bcprov-jdk15",[432],{"version":424,"is_range":404,"range_type":425,"version_start":9,"version_start_type":9,"version_end":426,"version_end_type":427,"fixed_in":9},{"ecosystem":417,"name":434,"vendor":419,"product":435,"cpe_part":9,"purl_type":421,"purl_namespace":419,"purl_name":435,"source":9,"versions":436},"org.bouncycastle:bcprov-jdk15on","bcprov-jdk15on",[437],{"version":424,"is_range":404,"range_type":425,"version_start":9,"version_start_type":9,"version_end":426,"version_end_type":427,"fixed_in":9}]