Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Bouncy Castle Java crypto library bcprov-jdk18on updated to prevent data compromise
published 1 month ago
Summary
The Bouncy Castle cryptographic library (bcprov‑jdk18on) used in Java applications was found to have a security weakness. Root has released patched versions that close the weakness and protect encrypted data. Update to the newest version of the library as soon as possible.
What to do
- Update bouncycastle org.bouncycastle:bcprov-jdk18on to version 1.80-aikido.12.
- Update root io.root.org.bouncycastle:bcprov-jdk18on to version 1.80-root.io.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Maven | bouncycastle | org.bouncycastle:bcprov-jdk18on |
< 1.80-aikido.12 Fix: upgrade to 1.80-aikido.12
|
| Root:Maven | root | io.root.org.bouncycastle:bcprov-jdk18on |
< 1.80-root.io.12 Fix: upgrade to 1.80-root.io.12
|
Original advisory text
AIKIDO-2026-98906 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched AIKIDO-2026-98906 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available.
Timeline
Published30 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
Track software like this
Free during beta