Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the solveQuadraticEquation function used for certificate verification in ECCurve.java. Passing a large f2m parameter can cause excessive CPU consumption. Remediation Upgrade...

ROBOT Attack

Bouncy Castle Cryptography API is vulnerable to ROBOT attack. The vulnerability exists due to the usage of simple RSA CMS signatures without signed attributes...