Skip to Content (Press Enter)
How is your experience with the OutSystems Community?
UserImage.jpg
Guilherme Craveiro
13Views
0Comments
[JWT] 21 New Vulnerabilities (1 C and 20H) Found in BouncyCastle.Cryptography
Question
Forge
OutSystems 11
Service
jwt
Service icon
JWT (O11)
Forge asset by João Almeida
Application Type
Service
Platform Version
11.42.0 (Build 47752)

Hi Team,

As per our latest snyk scans to our code extension we were able to find around 21 new vulnerabilities - 1 Critical and 20 High - in BouncyCastle.Cryptography.

Please check the links below for more information:

  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537027 - Critical
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537000
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537001
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537002
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537005
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537006
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537007
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537008
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537011
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537012
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537015
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537016
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537017
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537018
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537023
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537026
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537028
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537028
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537029
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537032
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537033
  • https://security.snyk.io/vuln/SNYK-DOTNET-BOUNCYCASTLECRYPTOGRAPHY-20537034


It appears that the recommended fix for these vulnerabilities is to upgrade BouncyCastle.Cryptography to version 2.7.0 or later.


Could you please share the roadmap and expected timeline to update this Forge component?

Thank you in advance.


Best Regards,

Guilherme Craveiro

1
0
22 Oct
Copy Link
Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.