Search for packages
Package details: pkg:maven/org.bouncycastle/bc-fips@2.0.0
purl pkg:maven/org.bouncycastle/bc-fips@2.0.0
Next non-vulnerable version 2.1.0
Latest non-vulnerable version 2.1.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5aet-5u76-sugd
Aliases:
CVE-2025-8885
GHSA-67mf-3cr5-8w23
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files https://github.Com/bcgit/bc-java/blob/main/core/src/main/java/org/bouncycastle/asn1/ASN1ObjectIdentifier.Java. This issue affects Bouncy Castle for Java: from BC 1.0 through 1.77, from BC-FJA 1.0.0 through 2.0.0.
2.1.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-13T13:18:04.085830+00:00 GHSA Importer Affected by VCID-5aet-5u76-sugd https://github.com/advisories/GHSA-67mf-3cr5-8w23 37.0.0