Bouncycastle Bouncy Castle Crypto Package — known CVE vulnerabilities

Every CVE whose affected-product data names Bouncycastle Bouncy Castle Crypto Package, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2015-7940 — CVSS 5.0 (medium): The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote…