{
  "@id": "urn:uuid:e434fcf0-437b-400b-a563-cc7229ed2b15",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 8,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-29T02:23:11.597840+00:00",
      "status_notes": "Vulnerability CVE-2013-1624 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2013-1624"
      },
      "action_statement": "Vulnerability CVE-2013-1624 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2015-7940 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2015-7940"
      },
      "action_statement": "Vulnerability CVE-2015-7940 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000338 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000338"
      },
      "action_statement": "Vulnerability CVE-2016-1000338 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000339 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000339"
      },
      "action_statement": "Vulnerability CVE-2016-1000339 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2016-1000340 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000340"
      },
      "action_statement": "Vulnerability CVE-2016-1000340 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000341 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000341"
      },
      "action_statement": "Vulnerability CVE-2016-1000341 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000342 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000342"
      },
      "action_statement": "Vulnerability CVE-2016-1000342 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000343 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000343"
      },
      "action_statement": "Vulnerability CVE-2016-1000343 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000344 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000344"
      },
      "action_statement": "Vulnerability CVE-2016-1000344 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000345 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000345"
      },
      "action_statement": "Vulnerability CVE-2016-1000345 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000346 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000346"
      },
      "action_statement": "Vulnerability CVE-2016-1000346 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2016-1000352 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2016-1000352"
      },
      "action_statement": "Vulnerability CVE-2016-1000352 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2017-13098 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2017-13098"
      },
      "action_statement": "Vulnerability CVE-2017-13098 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2018-1000180 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2018-1000180"
      },
      "action_statement": "Vulnerability CVE-2018-1000180 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-29T03:08:22.902372+00:00",
      "status_notes": "Vulnerability CVE-2018-1000613 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2018-1000613"
      },
      "action_statement": "Vulnerability CVE-2018-1000613 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2018-5382 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2018-5382"
      },
      "action_statement": "Vulnerability CVE-2018-5382 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-0187 is fixed in version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2020-0187"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-15522 is fixed in version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2020-15522"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-28T23:00:15.311032+00:00",
      "status_notes": "Vulnerability CVE-2020-26939 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2020-26939"
      },
      "action_statement": "Vulnerability CVE-2020-26939 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-10-29T03:08:22.902372+00:00",
      "status_notes": "Vulnerability CVE-2020-28052 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2020-28052"
      },
      "action_statement": "Vulnerability CVE-2020-28052 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-33201 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2023-33201"
      },
      "action_statement": "Vulnerability CVE-2023-33201 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-33202 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2023-33202"
      },
      "action_statement": "Vulnerability CVE-2023-33202 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-29857 is fixed in version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on.",
      "vulnerability": {
        "name": "CVE-2024-29857"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-30171 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2024-30171"
      },
      "action_statement": "Vulnerability CVE-2024-30171 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-34447 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5.",
      "vulnerability": {
        "name": "CVE-2024-34447"
      },
      "action_statement": "Vulnerability CVE-2024-34447 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.5."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-14813 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2025-14813"
      },
      "action_statement": "Vulnerability CVE-2025-14813 affects version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on, and is fixed in 1.64-tuxcare.6."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.64-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-3505 does not affect version 1.64-tuxcare.4 of org.bouncycastle:bcpg-jdk15on. Bouncy Castle Java 1.64 is not affected by CVE-2026-3505. The vulnerability specifically targets OpenPGP AEAD encrypted-data packet processing, including AEADEncDataPacket, BcAEADUtil, and JceAEADUtil, which do not exist in version 1.64. Although Bouncy Castle Java 1.64 includes OpenPGP functionality, it does not support the vulnerable AEAD packet type and rejects packet tag 20 as unknown",
      "vulnerability": {
        "name": "CVE-2026-3505"
      },
      "impact_statement": "Bouncy Castle Java 1.64 is not affected by CVE-2026-3505. The vulnerability specifically targets OpenPGP AEAD encrypted-data packet processing, including AEADEncDataPacket, BcAEADUtil, and JceAEADUtil, which do not exist in version 1.64. Although Bouncy Castle Java 1.64 includes OpenPGP functionality, it does not support the vulnerable AEAD packet type and rejects packet tag 20 as unknown"
    }
  ]
}