{
  "published": "2026-08-31T17:37:27Z",
  "modified": "2026-09-03T19:04:21Z",
  "schema_version": "1.7.5",
  "id": "CGA-p2vc-88cw-vx2p",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
    }
  ],
  "upstream": [
    "CVE-2018-1000180",
    "GHSA-xqj7-j8j5-f2xr"
  ],
  "references": [
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuoct2020.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://github.com/bcgit/bc-java/wiki/CVE-2018-1000180"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2428"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2019:0877"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2643"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.bountysource.com/issues/58293083-rsa-key-generation-computation-of-iterations-for-mr-primality-test"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2424"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.debian.org/security/2018/dsa-4233"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2425"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2669"
    },
    {
      "type": "ADVISORY",
      "url": "http://www.securityfocus.com/bid/106567"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:2423"
    },
    {
      "type": "FIX",
      "url": "https://github.com/bcgit/bc-java/commit/22467b6e8fe19717ecdf201c0cf91bacf04a55ad"
    },
    {
      "type": "FIX",
      "url": "https://github.com/bcgit/bc-java/commit/73780ac522b7795fc165630aba8d5f5729acc839"
    },
    {
      "type": "FIX",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
    },
    {
      "type": "FIX",
      "url": "https://security.netapp.com/advisory/ntap-20190204-0003/"
    },
    {
      "type": "FIX",
      "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
    }
  ],
  "affected": [
    {
      "package": {
        "ecosystem": "Chainguard",
        "name": "eco-java-gradle-2.0",
        "purl": "pkg:apk/chainguard/eco-java-gradle-2.0?arch=aarch64"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "components": [
          {
            "component_name": "bcprov-jdk15",
            "component_version": "1.46",
            "component_type": "java-archive",
            "component_location": "/usr/lib/gradle/2.0/lib/plugins/bcprov-jdk15-1.46.jar",
            "component_purl": "pkg:maven/bcprov-jdk15@1.46",
            "latest_event_status": "pending_upstream_fix",
            "latest_event_timestamp": "2026-09-03T19:04:20Z"
          }
        ]
      }
    }
  ]
}
