# Background [spring-security-rsa 1.1.2](https://mvnrepository.com/artifact/org.springframework.security/spring-security-rsa/1.1.2) Compile dependency `bcprov-jdk18on 1.77` has a recently published CVE. Please upgrade dependency `bcprov-jdk18on` to `1.78` or above in `spring-security-rsa`. - [SNYK-JAVA-ORGBOUNCYCASTLE-6612984](https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6612984) - [SNYK-JAVA-ORGBOUNCYCASTLE-6613076](https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6613076) Related ticket: - https://github.com/spring-cloud/spring-cloud-config/issues/2405