Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Bouncy Castle Java crypto library could let attackers bypass security
published 1 month ago
Summary
The Bouncy Castle cryptography library for Java (bcprov‑jdk18on) was found to have a weakness that could allow an attacker to bypass security protections. This affects any application that includes the library from the Maven repository, including versions provided by both Bouncy Castle and Root. Update to the latest patched version of bcprov‑jdk18on as soon as possible to close the gap.
What to do
- Update bouncycastle org.bouncycastle:bcprov-jdk18on to version 1.80-aikido.11.
- Update root io.root.org.bouncycastle:bcprov-jdk18on to version 1.80-root.io.11.
- Update bouncycastle org.bouncycastle:bcprov-jdk18on to version 1.80-aikido.12.
- Update root io.root.org.bouncycastle:bcprov-jdk18on to version 1.80-root.io.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Maven | bouncycastle | org.bouncycastle:bcprov-jdk18on |
< 1.80-aikido.11 < 1.80-aikido.12 Fix: upgrade to 1.80-aikido.11
|
| Root:Maven | root | io.root.org.bouncycastle:bcprov-jdk18on |
< 1.80-root.io.11 < 1.80-root.io.12 Fix: upgrade to 1.80-root.io.11
|
Original advisory text
AIKIDO-2026-652915 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched AIKIDO-2026-652915 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available.
Timeline
Published30 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
Track software like this
Free during beta