[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-29857":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-06T02:55:33.997Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":51,"related":52,"reserved_at":9,"published_at":87,"modified_at":88,"state":89,"summary":90,"references_raw":99,"kevs":141,"epss":142,"epss_history":145,"metrics":403,"affected":418},"CVE-2024-29857","An issue was discovered in ECCurve.java and ECCurve.cs in Bouncy Castle Java (BC Java) before 1.78, BC Java LTS before 2.73.6, BC-FJA before 1.0.2.5, and BC C# .Net before 2.3.1. Importing an EC certificate with crafted F2m parameters can lead to excessive CPU consumption during the evaluation of the curve parameters.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[25,26,27,28],"CGA-pmw5-3929-3rqr","CGA-h49m-7vwx-446f","CGA-x9cj-c42r-f4mr","GHSA-8xfc-gm6g-vgpv",[],[31,33,35,37,39,41,43,45,47,49],{"_key":32},"OPENSUSE-SU-2024:13914-1",{"_key":34},"UBUNTU-CVE-2024-29857",{"_key":36},"OPENSUSE-SU-2025:15739-1",{"_key":38},"USN-8108-1",{"_key":40},"DEBIAN-CVE-2024-29857",{"_key":42},"RHSA-2024:5143",{"_key":44},"RHSA-2024:5144",{"_key":46},"RHSA-2024:5145",{"_key":48},"RHSA-2024:5479",{"_key":50},"RHSA-2024:5481",[],[53,54,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85],{"_key":32},{"_key":36},{"_key":56},"CGA-29H3-969M-J2CR",{"_key":58},"CGA-448V-PF2R-J83M",{"_key":60},"CGA-4CGJ-59HQ-H2HC",{"_key":62},"CGA-4PH3-8P4P-WR86",{"_key":64},"CGA-5HP5-R4PG-F3P7",{"_key":66},"CGA-7P4P-M9QG-MV7R",{"_key":68},"CGA-89H2-VV89-63R8",{"_key":70},"CGA-CW5G-GFW6-XX43",{"_key":72},"CGA-F25F-36F8-W45W",{"_key":74},"CGA-F92W-P726-49XR",{"_key":76},"CGA-G9H5-GX89-C9V8",{"_key":78},"CGA-P93X-49FC-V5M3",{"_key":80},"CGA-PFV3-X3HQ-59QP",{"_key":82},"CGA-VMGG-M99C-VCMM",{"_key":84},"CGA-XX3M-CG2G-F46R",{"_key":86},"CGA-MJ34-VGR8-HG2F","2024-05-09T04:17:29.645Z","2025-02-13T15:47:48.325Z","Deferred",{"cisa_kev":91,"cisa_ransomware":91,"cisa_vendor":9,"epss_severity":92,"epss_score":93,"severity":94,"severity_score":95,"severity_version":96,"severity_source":97,"severity_vector":98,"severity_status":89},false,"low",0.00252,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[100,108,112,116,120,125,129,133,137],{"url":101,"sources":102,"tags":106},"https://www.bouncycastle.org/latest_releases.html",[97,103,104,105],"nvd","osv_maven","osv_nuget",[107],"WEB",{"url":109,"sources":110,"tags":111},"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857",[97,103,104,105],[107],{"url":113,"sources":114,"tags":115},"https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857",[97,103,104,105],[107],{"url":117,"sources":118,"tags":119},"https://security.netapp.com/advisory/ntap-20241206-0008/",[97,103],[],{"url":121,"sources":122,"tags":123},"https://nvd.nist.gov/vuln/detail/CVE-2024-29857",[104,105],[124],"Advisory",{"url":126,"sources":127,"tags":128},"https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63",[104,105],[107],{"url":130,"sources":131,"tags":132},"https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f",[104,105],[107],{"url":134,"sources":135,"tags":136},"https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281",[104,105],[107],{"url":138,"sources":139,"tags":140},"https://security.netapp.com/advisory/ntap-20241206-0008",[104,105],[107],[],{"date":143,"score":93,"percentile":144},"2026-06-05",0.48752,[146,150,153,156,159,162,165,168,170,173,176,179,182,184,186,190,193,196,199,202,205,208,211,214,217,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,339,342,345,348,350,352,355,357,359,361,364,367,369,372,374,376,379,382,385,388,391,393,395,397,400],{"date":147,"score":148,"percentile":149},"2025-11-04",0.00203,0.4263,{"date":151,"score":148,"percentile":152},"2025-11-05",0.42623,{"date":154,"score":148,"percentile":155},"2025-11-06",0.42636,{"date":157,"score":148,"percentile":158},"2025-11-07",0.42662,{"date":160,"score":148,"percentile":161},"2025-11-08",0.42663,{"date":163,"score":148,"percentile":164},"2025-11-09",0.42638,{"date":166,"score":148,"percentile":167},"2025-11-10",0.42605,{"date":169,"score":148,"percentile":152},"2025-11-11",{"date":171,"score":148,"percentile":172},"2025-11-12",0.42658,{"date":174,"score":148,"percentile":175},"2025-11-13",0.42671,{"date":177,"score":148,"percentile":178},"2025-11-14",0.42682,{"date":180,"score":148,"percentile":181},"2025-11-15",0.42678,{"date":183,"score":148,"percentile":158},"2025-11-16",{"date":185,"score":148,"percentile":149},"2025-11-17",{"date":187,"score":188,"percentile":189},"2025-11-18",0.00409,0.58537,{"date":191,"score":188,"percentile":192},"2025-11-19",0.58553,{"date":194,"score":188,"percentile":195},"2025-11-20",0.58541,{"date":197,"score":148,"percentile":198},"2025-11-21",0.42613,{"date":200,"score":148,"percentile":201},"2025-11-22",0.42615,{"date":203,"score":148,"percentile":204},"2025-11-23",0.42586,{"date":206,"score":148,"percentile":207},"2025-11-24",0.42576,{"date":209,"score":148,"percentile":210},"2025-11-25",0.42592,{"date":212,"score":148,"percentile":213},"2025-11-26",0.42587,{"date":215,"score":148,"percentile":216},"2025-11-27",0.4259,{"date":218,"score":219,"percentile":220},"2025-11-28",0.00337,0.55882,{"date":222,"score":219,"percentile":223},"2025-11-29",0.55868,{"date":225,"score":219,"percentile":226},"2025-11-30",0.55855,{"date":228,"score":148,"percentile":229},"2025-12-01",0.42643,{"date":231,"score":148,"percentile":232},"2025-12-02",0.42653,{"date":234,"score":148,"percentile":235},"2025-12-03",0.42654,{"date":237,"score":219,"percentile":238},"2025-12-04",0.55857,{"date":240,"score":219,"percentile":241},"2025-12-05",0.55873,{"date":243,"score":219,"percentile":244},"2025-12-06",0.55874,{"date":246,"score":219,"percentile":247},"2025-12-07",0.55869,{"date":249,"score":219,"percentile":250},"2025-12-08",0.55872,{"date":252,"score":219,"percentile":253},"2025-12-09",0.55887,{"date":255,"score":219,"percentile":256},"2025-12-10",0.55946,{"date":258,"score":219,"percentile":259},"2025-12-11",0.55969,{"date":261,"score":219,"percentile":262},"2025-12-12",0.55992,{"date":264,"score":219,"percentile":265},"2025-12-13",0.55984,{"date":267,"score":219,"percentile":268},"2025-12-14",0.55981,{"date":270,"score":219,"percentile":271},"2025-12-15",0.55967,{"date":273,"score":219,"percentile":268},"2025-12-16",{"date":275,"score":219,"percentile":276},"2025-12-17",0.55999,{"date":278,"score":219,"percentile":279},"2025-12-18",0.5604,{"date":281,"score":219,"percentile":282},"2025-12-19",0.56044,{"date":284,"score":219,"percentile":285},"2025-12-20",0.56036,{"date":287,"score":219,"percentile":288},"2025-12-21",0.56013,{"date":290,"score":219,"percentile":291},"2025-12-22",0.55995,{"date":293,"score":219,"percentile":294},"2025-12-23",0.56003,{"date":296,"score":219,"percentile":297},"2025-12-24",0.5601,{"date":299,"score":219,"percentile":300},"2025-12-25",0.56058,{"date":302,"score":219,"percentile":303},"2025-12-26",0.56054,{"date":305,"score":219,"percentile":306},"2025-12-27",0.56106,{"date":308,"score":219,"percentile":309},"2025-12-28",0.56018,{"date":311,"score":219,"percentile":312},"2025-12-29",0.56001,{"date":314,"score":219,"percentile":315},"2025-12-30",0.55996,{"date":317,"score":219,"percentile":318},"2025-12-31",0.56009,{"date":320,"score":148,"percentile":321},"2026-01-01",0.42749,{"date":323,"score":148,"percentile":324},"2026-01-02",0.42723,{"date":326,"score":148,"percentile":327},"2026-01-03",0.42714,{"date":329,"score":219,"percentile":330},"2026-01-04",0.55974,{"date":332,"score":219,"percentile":333},"2026-01-05",0.55965,{"date":335,"score":219,"percentile":336},"2026-01-06",0.55973,{"date":338,"score":219,"percentile":312},"2026-01-07",{"date":340,"score":219,"percentile":341},"2026-01-08",0.56022,{"date":343,"score":219,"percentile":344},"2026-01-09",0.56019,{"date":346,"score":219,"percentile":347},"2026-01-10",0.56017,{"date":349,"score":219,"percentile":262},"2026-01-11",{"date":351,"score":219,"percentile":256},"2026-01-12",{"date":353,"score":219,"percentile":354},"2026-01-13",0.55923,{"date":356,"score":219,"percentile":271},"2026-01-14",{"date":358,"score":219,"percentile":330},"2026-01-15",{"date":360,"score":219,"percentile":315},"2026-01-16",{"date":362,"score":219,"percentile":363},"2026-01-17",0.5599,{"date":365,"score":219,"percentile":366},"2026-01-18",0.55983,{"date":368,"score":219,"percentile":330},"2026-01-19",{"date":370,"score":219,"percentile":371},"2026-01-20",0.55977,{"date":373,"score":219,"percentile":268},"2026-01-21",{"date":375,"score":219,"percentile":366},"2026-01-22",{"date":377,"score":219,"percentile":378},"2026-01-23",0.56027,{"date":380,"score":219,"percentile":381},"2026-01-24",0.56029,{"date":383,"score":219,"percentile":384},"2026-01-25",0.55988,{"date":386,"score":219,"percentile":387},"2026-01-26",0.55975,{"date":389,"score":219,"percentile":390},"2026-01-27",0.55989,{"date":392,"score":219,"percentile":312},"2026-01-28",{"date":394,"score":219,"percentile":294},"2026-01-29",{"date":396,"score":219,"percentile":318},"2026-01-30",{"date":398,"score":219,"percentile":399},"2026-01-31",0.56012,{"date":401,"score":148,"percentile":402},"2026-02-01",0.42505,[404,409,411,416],{"source":97,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":405,"cvss_v4_0":9},{"baseScore":95,"baseSeverity":406,"vectorString":98,"impactScore":407,"exploitabilityScore":408},"HIGH",6,10,{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":410,"cvss_v4_0":9},{"baseScore":95,"baseSeverity":406,"vectorString":98,"impactScore":407,"exploitabilityScore":408},{"source":104,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":412,"cvss_v4_0":9},{"baseScore":413,"baseSeverity":9,"vectorString":414,"impactScore":415,"exploitabilityScore":408},5.3,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",2.3,{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":417,"cvss_v4_0":9},{"baseScore":413,"baseSeverity":9,"vectorString":414,"impactScore":415,"exploitabilityScore":408},[419,431,437,447,454,459,464,469,474,479,484,491],{"ecosystem":420,"name":421,"vendor":422,"product":421,"cpe_part":9,"purl_type":423,"purl_namespace":422,"purl_name":421,"source":9,"versions":424},"Chainguard","apache-nifi","chainguard","apk",[425],{"version":426,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":429,"version_end_type":430,"fixed_in":9},"lt1_26_0_r2",true,"ecosystem","1.26.0-r2","excluding",{"ecosystem":420,"name":432,"vendor":422,"product":432,"cpe_part":9,"purl_type":423,"purl_namespace":422,"purl_name":432,"source":9,"versions":433},"logstash-jre-bcfips",[434],{"version":435,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":436,"version_end_type":430,"fixed_in":9},"lt8_13_4_r0","8.13.4-r0",{"ecosystem":438,"name":439,"vendor":440,"product":441,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":441,"source":9,"versions":443},"Maven","org.bouncycastle:bc-fips","org.bouncycastle","bc-fips","maven",[444],{"version":445,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":446,"version_end_type":430,"fixed_in":9},"lt1_0_2_5","1.0.2.5",{"ecosystem":438,"name":448,"vendor":440,"product":449,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":449,"source":9,"versions":450},"org.bouncycastle:bcprov-jdk14","bcprov-jdk14",[451],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},"lt1_78","1.78",{"ecosystem":438,"name":455,"vendor":440,"product":456,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":456,"source":9,"versions":457},"org.bouncycastle:bcprov-jdk15on","bcprov-jdk15on",[458],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":438,"name":460,"vendor":440,"product":461,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":461,"source":9,"versions":462},"org.bouncycastle:bcprov-jdk15to18","bcprov-jdk15to18",[463],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":438,"name":465,"vendor":440,"product":466,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":466,"source":9,"versions":467},"org.bouncycastle:bcprov-jdk18on","bcprov-jdk18on",[468],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":438,"name":470,"vendor":440,"product":471,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":471,"source":9,"versions":472},"org.bouncycastle:bctls-jdk14","bctls-jdk14",[473],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":438,"name":475,"vendor":440,"product":476,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":476,"source":9,"versions":477},"org.bouncycastle:bctls-jdk15to18","bctls-jdk15to18",[478],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":438,"name":480,"vendor":440,"product":481,"cpe_part":9,"purl_type":442,"purl_namespace":440,"purl_name":481,"source":9,"versions":482},"org.bouncycastle:bctls-jdk18on","bctls-jdk18on",[483],{"version":452,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":430,"fixed_in":9},{"ecosystem":485,"name":486,"vendor":485,"product":486,"cpe_part":9,"purl_type":487,"purl_namespace":9,"purl_name":486,"source":9,"versions":488},"NuGet","BouncyCastle","nuget",[489],{"version":490,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":485,"name":492,"vendor":485,"product":492,"cpe_part":9,"purl_type":487,"purl_namespace":9,"purl_name":492,"source":9,"versions":493},"BouncyCastle.Cryptography",[494],{"version":495,"is_range":427,"range_type":428,"version_start":9,"version_start_type":9,"version_end":496,"version_end_type":430,"fixed_in":9},"lt2_3_1","2.3.1"]