Approved changes feed: RSS · Atom

cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:*

part: a version: 1.27 update: *

VendorBouncycastle (8993aee6-be06-52a7-a5ab-9d1fe290e16e)
ProductBouncy Castle Crypto Package (caccbe8a-6514-50f4-b605-2c835beea81b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/bcgit/bc-csharp purl2cpe 2026-06-01 10:12:20.969005
pkg:github/bcgit/bc-java purl2cpe 2026-06-01 10:12:20.969006
pkg:nuget/bouncycastle.netframework purl2cpe 2026-06-01 10:12:20.969008

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6721 vulnerable 2026-06-03 14:28:30.456260 Details available
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Published: 2009-03-30T01:00:00.000Z
Updated: 2024-08-07T16:18:20.431Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.