{"action":"Upgrade org.bouncycastle:bcprov-jdk15 to 1.56 or later.","affected":[{"fixed":"1.56","introduced":"1.51"}],"component":"org.bouncycastle:bcprov-jdk15","cve_ids":["CVE-2016-1000340"],"ecosystem":"Maven","epss":0.02297,"exploited":false,"fixed_versions":["1.56"],"ghsa_id":"GHSA-r97x-3g8f-gx3m","id":"tcs_01M5N9BBWA8TJP3NH70P9PKGAJ","modified_at":"2025-09-12T20:11:40.283362Z","published_at":"2018-10-17T16:23:50Z","references":["https://osv.dev/vulnerability/GHSA-r97x-3g8f-gx3m","https://nvd.nist.gov/vuln/detail/CVE-2016-1000340","https://github.com/bcgit/bc-java/commit/790642084c4e0cadd47352054f868cc8397e2c00#diff-e5934feac8203ca0104ab291a3560a31","https://access.redhat.com/errata/RHSA-2018:2669","https://access.redhat.com/errata/RHSA-2018:2927","https://github.com/advisories/GHSA-r97x-3g8f-gx3m","https://github.com/bcgit/bc-java","https://security.netapp.com/advisory/ntap-20181127-0004","https://www.oracle.com/security-alerts/cpuoct2020.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-r97x-3g8f-gx3m#Maven/org.bouncycastle:bcprov-jdk15","url":"https://osv.dev/vulnerability/GHSA-r97x-3g8f-gx3m"}],"summary":"The Bouncy Castle JCE Provider carry a propagation bug"}