| Package | Affected versions | Patched versions |
|---|---|---|
| bc-java | < 1.85 | 1.85 |
| bouncy castle for java lts | ≤ 2.73.11 |
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free