Package Health/org.bouncycastle:bcpg-jdk15to18

bcpg-jdk15to18

The Bouncy Castle Java APIs for the OpenPGP Protocol. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services. This jar is designed to work best with Java 1.5 to Java 1.8.

Latest 1.86org.bouncycastle

Maven

91%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention the package, creating a genuine transparency concern about the exact package-to-repository linkage. The mismatch is partly understandable for a module in a broader repository, but the lack of a README mention remains cautionary.

Token permissions

The analyzed workflow has no top-level permissions declaration, which weakens least-privilege clarity even though it has no top-level write permissions and only job-level permissions were observed.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-307053 bcpg-jdk15to18 is vulnerable to Integrity Check Bypass in versions 1.74 - 1.85.	1.74 - 1.85	High
AIKIDO-2026-869459 bcpg-jdk15to18 is vulnerable to Signature Verification Bypass in versions 1.81 - 1.85.	1.81 - 1.85	High
AIKIDO-2026-147818 bcpg-jdk15to18 is vulnerable to Incorrect Authorization in versions 1.81 - 1.85.	1.81 - 1.85	Medium
AIKIDO-2026-127195 bcpg-jdk15to18 is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 1.84.	0.0.1 - 1.84	High