- How many CVEs does bouncycastle have?
- bouncycastle has 62 published CVE records since 2009, including 34 in the last two years.
- How many bouncycastle CVEs are in CISA KEV?
- None of bouncycastle's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which bouncycastle products have the most CVEs?
- The bouncycastle products with the most published CVEs are bc-java, bouncy castle for java lts, fips java api, bcpg-fips, bcpkix-fips.
- What are the most common weakness types in bouncycastle CVEs?
- bouncycastle's CVEs most often map to these CWE weakness types: CWE-354 (Improper Validation of Integrity Check Value), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-789 (Memory Allocation with Excessive Size Value), CWE-347 (Improper Verification of Cryptographic Signature).
- Are there public exploits for bouncycastle vulnerabilities?
- Yes — 4 of bouncycastle's CVEs have a known public exploit.
- How many critical bouncycastle vulnerabilities are there?
- bouncycastle has 6 critical and 35 high-severity CVEs.
- What is the average severity of bouncycastle CVEs?
- The average CVSS base score across bouncycastle's scored CVEs is 7.5.
