critical vulnerability

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Partly patchedCritical · CVSS 9.3EPSS 0.32%

Published Apr 17, 2026 · updated Sep 24, 2026

What to do

Upgrade to a fixed version: org.bouncycastle:bcprov-jdk18on 1.80.2, org.bouncycastle:bcprov-jdk18on 1.81.1, org.bouncycastle:bcprov-jdk14 1.84, org.bouncycastle:bcprov-jdk15to18 1.84 (see table).
Some affected packages have no fixed version yet: follow the advisory for mitigations and watch this page for the fix.
Redeploy and restart long-running processes so they load the fixed code.

Affected packages

Mavenorg.bouncycastle:bcprov-jdk14

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk14

Mavenorg.bouncycastle:bcprov-jdk15to18

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk15to18

Mavenorg.bouncycastle:bcprov-jdk18on

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: 1.80.2

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk18on

Mavenorg.bouncycastle:bcprov-debug-jdk14

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk14

Mavenorg.bouncycastle:bcprov-debug-jdk15to18

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk15to18

Mavenorg.bouncycastle:bcprov-debug-jdk18on

Vulnerable versions: >= 1.59, <= 1.80.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk18on

Mavenorg.bouncycastle:bcprov-ext-jdk14

Vulnerable versions: >= 1.59, <= 1.78.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-jdk14

Mavenorg.bouncycastle:bcprov-ext-jdk15to18

Vulnerable versions: >= 1.59, <= 1.78.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-jdk15to18

Mavenorg.bouncycastle:bcprov-ext-jdk18on

Vulnerable versions: >= 1.59, <= 1.78.1
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-jdk18on

Mavenorg.bouncycastle:bcprov-ext-debug-jdk14

Vulnerable versions: >= 1.59, <= 1.74
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-debug-jdk14

Mavenorg.bouncycastle:bcprov-ext-debug-jdk15to18

Vulnerable versions: >= 1.59, <= 1.77
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-debug-jdk15to18

Mavenorg.bouncycastle:bcprov-ext-debug-jdk18on

Vulnerable versions: >= 1.59, <= 1.77
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-ext-debug-jdk18on

Mavenorg.bouncycastle:bcprov-jdk14

Vulnerable versions: = 1.81.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk14

Mavenorg.bouncycastle:bcprov-jdk15to18

Vulnerable versions: = 1.81.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk15to18

Mavenorg.bouncycastle:bcprov-jdk18on

Vulnerable versions: = 1.81.0
Fixed in: 1.81.1

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk18on

Mavenorg.bouncycastle:bcprov-debug-jdk14

Vulnerable versions: = 1.81.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk14

Mavenorg.bouncycastle:bcprov-debug-jdk15to18

Vulnerable versions: = 1.81.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk15to18

Mavenorg.bouncycastle:bcprov-debug-jdk18on

Vulnerable versions: = 1.81.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk18on

Mavenorg.bouncycastle:bcprov-jdk14

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk14

Mavenorg.bouncycastle:bcprov-jdk15to18

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk15to18

Mavenorg.bouncycastle:bcprov-jdk18on

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk18on

Mavenorg.bouncycastle:bcprov-debug-jdk14

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk14

Mavenorg.bouncycastle:bcprov-debug-jdk15to18

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk15to18

Mavenorg.bouncycastle:bcprov-debug-jdk18on

Vulnerable versions: >= 1.82, <= 1.83
Fixed in: 1.84

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk18on

Mavenorg.bouncycastle:bcprov-debug-jdk15on

Vulnerable versions: <= 1.7.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-debug-jdk15on

Mavenorg.bouncycastle:bcprov-jdk15on

Vulnerable versions: <= 1.7.0
Fixed in: no fix yet

Check your project: mvn dependency:tree -Dincludes=org.bouncycastle:bcprov-jdk15on

Sources

CWE-323 Reusing a Nonce, Key Pair in Encryption · CWE-327 Use of a Broken or Risky Cryptographic Algorithm

← All critical vulnerabilities