The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for Java 1.8 and later. The APIs are designed primarily to be used in conjunction with the BC Java provider but may also be used with other providers providing cryptographic services.
94%
Total Score
93
100
88
100
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-593908 New bcpkix-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | Medium |
AIKIDO-2026-817610 New bcpkix-jdk18on is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | Medium |
AIKIDO-2026-943399 New bcpkix-jdk18on is vulnerable to Improper Validation of Integrity Check Value in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | High |
AIKIDO-2026-89900 New bcpkix-jdk18on is vulnerable to Improper Verification of Cryptographic Signature in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | High |
AIKIDO-2026-231096 New bcpkix-jdk18on is vulnerable to Improper Validation of Integrity Check Value in versions 0.0.1 - 1.84.0. | 0.0.1 - 1.84.0 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.bouncycastle:bcutil-jdk18on Version 1.85 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant