{"action":"Upgrade org.bouncycastle:bcprov-jdk15to18 to 1.78 or later.","affected":[{"fixed":"1.78","introduced":"1.73"}],"component":"org.bouncycastle:bcprov-jdk15to18","cve_ids":["CVE-2024-30172"],"ecosystem":"Maven","epss":0.00753,"exploited":false,"fixed_versions":["1.78"],"ghsa_id":"GHSA-m44j-cfrm-g8qc","id":"tcs_01M5N8TBYZ5S8HTFBV9CMG1P6C","modified_at":"2026-09-10T03:50:14.435958389Z","published_at":"2024-05-14T15:32:54Z","references":["https://osv.dev/vulnerability/GHSA-m44j-cfrm-g8qc","https://nvd.nist.gov/vuln/detail/CVE-2024-30172","https://github.com/bcgit/bc-java/commit/1b9fd9b545e691bfb3941a9f6a797660c8860f02","https://github.com/bcgit/bc-java/commit/9c165791b68a204678b48ec11e4e579754c2ea49","https://github.com/bcgit/bc-java/commit/ebe1c75579170072dc59b8dee2b55ce31663178f","https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030172","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030172","https://security.netapp.com/advisory/ntap-20240614-0007","https://www.bouncycastle.org/latest_releases.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-m44j-cfrm-g8qc#Maven/org.bouncycastle:bcprov-jdk15to18","url":"https://osv.dev/vulnerability/GHSA-m44j-cfrm-g8qc"}],"summary":"Bouncy Castle crafted signature and public key can be used to trigger an infinite loop"}