~ / search / GHSA-v6cf-mv9h-c8mc

GHSA-v6cf-mv9h-c8mc

Bouncy Castle for Java Uncontrolled Resource Consumption Vulnerability

Source: GitHub Advisory Database (reviewed) Low CVE-2025-9092

Packages

EcosystemPackageAffectedFixed in
Maven org.bouncycastle:bc-fips >= 2.1.0, < 2.1.1 2.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader. This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

References

External links from the advisory. They lead to third-party sites.