for org.bouncycastle:bcprov-jdk15:1.46, 3 vulnerabilities exists (https://snyk.io/vuln/maven:org.bouncycastle:bcprov-jdk15 : CVE-2013-1624, CVE-2015-7940, CVE-2018-5382) but only one (CVE-2015-7940) is discover by ODC

<dependency>
   <groupId>org.bouncycastle</groupId>
   <artifactId>bcprov-jdk15</artifactId>
   <version>1.46</version>
</dependency>

cpe:2.3:a:bouncycastle:bouncy_castle_crypto_package:*:*:*:*:*:*:*:*
or
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:*:*:*:*:*:*:*:*