bouncycastle fips java api vulnerabilities

Latest bouncycastle fips java api CVEs

Newest publication first

1. CVE-2018-1000180 Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator

   Published 2018-06-05

   High·CVSS 7.5

   Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fixed in ver...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.