VYPR

Legion Of The Bouncy Castle

by Legion Of The Bouncy Castle Inc.

CVEs (1)

  • CVE-2020-26939MedNov 2, 2020
    risk 0.28cvss 5.3epss 0.01

    In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending…