bcpkix-jdk18on
The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for Java 1.8 and later. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.
91%
Total Score
100
100
100
100
100
Health Score Breakdown
The only analyzed workflow scopes permissions at job level and has no untrusted checkouts, injection findings, or audit failures. However, all 3 action references are unpinned, creating a minor reproducibility and action-update hygiene gap.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-656738 bcpkix-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 1.71 - 1.85. | 1.71 - 1.85 | Medium |
AIKIDO-2026-415437 bcpkix-jdk18on is vulnerable to Insufficient Verification of Data Authenticity in versions 1.71 - 1.85. | 1.71 - 1.85 | High |
AIKIDO-2026-695180 bcpkix-jdk18on is vulnerable to Improper Certificate Validation in versions 1.74 - 1.85. | 1.74 - 1.85 | High |
AIKIDO-2026-434834 bcpkix-jdk18on is vulnerable to Improper Input Validation in versions 1.78 - 1.85. | 1.78 - 1.85 | Medium |
AIKIDO-2026-593908 bcpkix-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84. | 0.0.1 - 1.84 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 org.bouncycastle:bcutil-jdk18on Version 1.85 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.