{"action":"Upgrade org.bouncycastle:bcprov-jdk15on to 1.48 or later.","affected":[{"fixed":"1.48","introduced":"0"}],"component":"org.bouncycastle:bcprov-jdk15on","cve_ids":["CVE-2013-1624"],"ecosystem":"Maven","epss":0.02972,"exploited":false,"fixed_versions":["1.48"],"ghsa_id":"GHSA-8353-fgcr-xfhx","id":"tcs_01M5N8KK8BPXWQT2S18PA45394","modified_at":"2024-12-05T05:42:02.521197Z","published_at":"2022-05-14T02:14:04Z","references":["https://osv.dev/vulnerability/GHSA-8353-fgcr-xfhx","https://nvd.nist.gov/vuln/detail/CVE-2013-1624","http://openwall.com/lists/oss-security/2013/02/05/24","http://rhn.redhat.com/errata/RHSA-2014-0371.html","http://rhn.redhat.com/errata/RHSA-2014-0372.html","http://secunia.com/advisories/57716","http://secunia.com/advisories/57719","http://www.isg.rhul.ac.uk/tls/TLStiming.pdf"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8353-fgcr-xfhx","url":"https://osv.dev/vulnerability/GHSA-8353-fgcr-xfhx"}],"summary":"Improper Input Validation in Bouncy Castle"}