Search for packages
Package details: pkg:maven/org.bouncycastle/bc-fips@2.1.0
purl pkg:maven/org.bouncycastle/bc-fips@2.1.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-5aet-5u76-sugd Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files https://github.Com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java. This issue affects Bouncy Castle for Java: from BC 1.0 through 1.77, from BC-FJA 1.0.0 through 2.0.0. CVE-2025-8885
GHSA-67mf-3cr5-8w23

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-13T13:18:04.089919+00:00 GHSA Importer Fixing VCID-5aet-5u76-sugd https://github.com/advisories/GHSA-67mf-3cr5-8w23 37.0.0
2025-08-13T09:39:22.693979+00:00 GithubOSV Importer Fixing VCID-5aet-5u76-sugd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/08/GHSA-67mf-3cr5-8w23/GHSA-67mf-3cr5-8w23.json 37.0.0