The Bouncy Castle Java APIs for the OpenPGP Protocol. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services. This jar is designed to work best with Java 1.8 and later.
94%
Total Score
93
100
88
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-343055 New bcpg-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 1.71.0 - 1.84.0. | 1.71.0 - 1.84.0 | Medium |
AIKIDO-2026-464797 New bcpg-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | High |
AIKIDO-2026-431029 New bcpg-jdk18on is vulnerable to Improper Verification of Cryptographic Signature in versions 1.81.0 - 1.84.0. | 1.81.0 - 1.84.0 | High |
AIKIDO-2026-450423 New bcpg-jdk18on is vulnerable to Observable Discrepancy in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | High |
AIKIDO-2026-550297 New bcpg-jdk18on is vulnerable to Improper Validation of Integrity Check Value in versions 1.74.0 - 1.84.0. | 1.74.0 - 1.84.0 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.bouncycastle:bcprov-jdk18on Version 1.85 | — | — |
org.bouncycastle:bcutil-jdk18on Version 1.85 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant