{"action":"Upgrade org.bouncycastle:bcprov-jdk15 to 1.56 or later.","affected":[{"fixed":"1.56","introduced":"0"}],"component":"org.bouncycastle:bcprov-jdk15","cve_ids":["CVE-2016-1000339"],"ecosystem":"Maven","epss":0.0271,"exploited":false,"fixed_versions":["1.56"],"ghsa_id":"GHSA-c8xf-m4ff-jcxj","id":"tcs_01M5N8RZJGSFAPRPEDW899RZCH","modified_at":"2025-09-12T20:11:29.725840Z","published_at":"2018-10-17T16:23:38Z","references":["https://osv.dev/vulnerability/GHSA-c8xf-m4ff-jcxj","https://nvd.nist.gov/vuln/detail/CVE-2016-1000339","https://github.com/bcgit/bc-java/commit/413b42f4d770456508585c830cfcde95f9b0e93b#diff-54656f860db94b867ba7542430cd2ef0","https://github.com/bcgit/bc-java/commit/8a73f08931450c17c749af067b6a8185abdfd2c0#diff-494fb066bed02aeb76b6c005632943f2","https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2018:2927","https://github.com/advisories/GHSA-c8xf-m4ff-jcxj","https://lists.debian.org/debian-lts-announce/2018/07/msg00009.html","https://security.netapp.com/advisory/ntap-20181127-0004","https://usn.ubuntu.com/3727-1","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-c8xf-m4ff-jcxj#Maven/org.bouncycastle:bcprov-jdk15","url":"https://osv.dev/vulnerability/GHSA-c8xf-m4ff-jcxj"}],"summary":"Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15"}