CVE-2024-14041 ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)

[
  {
    "vendor": "Legion of the Bouncy Castle Inc.",
    "product": "BC-JAVA",
    "platforms": [
      "all"
    ],
    "collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/",
    "packageName": "bcprov",
    "repo": "https://github.com/bcgit/bc-java",
    "packageURL": "pkg:maven/org.bouncycastle/bcprov-jdk18on",
    "modules": [
      "core"
    ],
    "programFiles": [
      "Poly",
      "PolyVec"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "1.73",
        "lessThan": "1.78",
        "versionType": "maven"
      }
    ],
    "defaultStatus": "unaffected"
  }
]