Package Health/org.bouncycastle:bcpkix-jdk15to18

bcpkix-jdk15to18

The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for Java 1.5 to Java 1.8. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.

Latest 1.85org.bouncycastle

Maven

87%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

License

The registry declares the Bouncy Castle Licence and the repository contains a license file detected as MIT; because the detected license does not match the declaration, the licensing information deserves clarification.

Repo package mention

The repository name does not match this package and its README does not mention it; although this can occur for a monorepo subpackage, the relationship is less transparent than a direct package reference.

Workflow audit

The audited workflow has no untrusted checkouts, script injection, dangerous findings, or broad top-level write permissions. However, all 3 action references are unpinned, leaving a supply-chain hygiene gap.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-965518 bcpkix-jdk15to18 is vulnerable to Improper Certificate Validation in versions 1.74 - 1.85.	1.74 - 1.85	High
AIKIDO-2026-473769 bcpkix-jdk15to18 is vulnerable to Uncontrolled Resource Consumption in versions 1.71 - 1.85.	1.71 - 1.85	Medium
AIKIDO-2026-419412 bcpkix-jdk15to18 is vulnerable to Insufficient Verification of Data Authenticity in versions 1.63 - 1.85.	1.63 - 1.85	High
AIKIDO-2026-980215 bcpkix-jdk15to18 is vulnerable to Improper Input Validation in versions 1.78 - 1.85.	1.78 - 1.85	Medium
AIKIDO-2026-398185 bcpkix-jdk15to18 is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.	0.0.1 - 1.84	Medium