Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:11:07 +0000 GHSA-v435-xc8x-wvr9 — Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") https://cve.radiocsirt.org/vuln/ghsa-v435-xc8x-wvr9 <p><strong>Affected:</strong> Maven: org.bouncycastle:bctls-fips, Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bctls-jdk18on, Maven: org.bouncycastle:bctls-jdk14, Maven: org.bouncycastle:bctls-jdk15to18, NuGet: BouncyCastle, NuGet: BouncyCastle.Cryptography</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> <p><strong>Affected:</strong> Maven: org.bouncycastle:bctls-fips, Maven: org.bouncycastle:bcprov-jdk18on, Maven: org.bouncycastle:bcprov-jdk15on, Maven: org.bouncycastle:bcprov-jdk15to18, Maven: org.bouncycastle:bcprov-jdk14, Maven: org.bouncycastle:bctls-jdk18on, Maven: org.bouncycastle:bctls-jdk14, Maven: org.bouncycastle:bctls-jdk15to18, NuGet: BouncyCastle, NuGet: BouncyCastle.Cryptography</p> <p>An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.</p> https://cve.radiocsirt.org/vuln/ghsa-v435-xc8x-wvr9