maven bcprov vulnerabilities

Latest maven bcprov CVEs

Newest publication first

1. CVE-2025-8916 Possible DOS in processing large name constraint structures in PKIXCertPathReveiwer

   Published 2025-08-13

   Medium·CVSS 6.3 EPSS 0.56%

   Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All (API m...

2. CVE-2025-8885 Possible DOS in processing specially formed ASN.1 Object Identifiers

   Published 2025-08-12

   Medium·CVSS 6.3 EPSS 0.64%

   Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files http...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.