{"action":"Upgrade org.bouncycastle:bcprov-debug-jdk14 to 1.74 or later.","affected":[{"fixed":"1.74","introduced":"1.49"}],"component":"org.bouncycastle:bcprov-debug-jdk14","cve_ids":["CVE-2023-33201"],"ecosystem":"Maven","epss":0.00772,"exploited":false,"fixed_versions":["1.74"],"ghsa_id":"GHSA-hr8g-6v94-x4m9","id":"tcs_01M5N917GCJTY4WAM6B8Y1F94Z","modified_at":"2026-09-10T03:49:42.995735819Z","published_at":"2023-07-05T03:30:23Z","references":["https://osv.dev/vulnerability/GHSA-hr8g-6v94-x4m9","https://nvd.nist.gov/vuln/detail/CVE-2023-33201","https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd","https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc","https://bouncycastle.org","https://bouncycastle.org/releasenotes.html#r1rv74","https://github.com/bcgit/bc-java","https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java","https://github.com/bcgit/bc-java/wiki/CVE-2023-33201","https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html","https://security.netapp.com/advisory/ntap-20230824-0008"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-hr8g-6v94-x4m9#Maven/org.bouncycastle:bcprov-debug-jdk14","url":"https://osv.dev/vulnerability/GHSA-hr8g-6v94-x4m9"}],"summary":"Bouncy Castle For Java LDAP injection vulnerability"}