{"action":"Upgrade bouncycastle:bcprov-jdk14 to 1.38 or later.","affected":[{"fixed":"1.38","introduced":"0"}],"component":"bouncycastle:bcprov-jdk14","cve_ids":["CVE-2007-6721"],"ecosystem":"Maven","epss":0.02413,"exploited":false,"fixed_versions":["1.38"],"ghsa_id":"GHSA-m26p-m559-g5j5","id":"tcs_01M5N941D0HBW015WEJ01P6ERE","modified_at":"2023-11-08T03:56:49.596672Z","published_at":"2022-05-01T18:45:52Z","references":["https://osv.dev/vulnerability/GHSA-m26p-m559-g5j5","https://nvd.nist.gov/vuln/detail/CVE-2007-6721","https://github.com/bcgit/bc-java","https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp","https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html","http://www.bouncycastle.org/devmailarchive/msg08195.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m26p-m559-g5j5","url":"https://osv.dev/vulnerability/GHSA-m26p-m559-g5j5"}],"summary":"Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability"}