Known vulnerabilities in Bouncy Castle for Java 1.58

Version: 1.58
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Bouncy Castle for Java version 1.58 Bouncy Castle for Java 1.58 is affected by 13 vulnerabilities: 12 medium, 1 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 12 more
#VU121014 - Resource exhaustion
CVE-2025-8885
CWE-400 Medium
No
No
1.78 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916
CWE-770 Medium
No
No
1.79 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 35 more
#VU89221 - Insufficient Verification of Data Authenticity
CVE-2024-34447
CWE-345 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024070445
SB2024071844
and 15 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU85874 - Resource exhaustion
CVE-2023-33202
CWE-400 Medium
No
No
1.73 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
1.74 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522
CWE-208 Medium
No
No
1.66 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939
CWE-200 Medium
No
No
1.61 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU27499 - Deserialization of Untrusted Data
CVE-2018-1000613
CWE-502 Medium
No
No
1.60 04.05.2020 SB2018070915
SB2020050421
SB2018080316
and 5 more
#VU9750 - Exposure of sensitive information to an unauthorized actor
CVE-2017-13098
CWE-200 Low
Public exploit available
No
1.59 22.12.2017 SB2017121312
SB2020050421
SB2018072803
and 5 more