Maven/org.bouncycastle:bc-fips CVE-2025-9340: unknown 0, EPSS 0.18%
Bouncy Castle for Java has Out-of-Bounds Write Vulnerability
Action: Upgrade org.bouncycastle:bc-fips to 2.1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.1 | - |
Fixed versions
| 2.1.1 |
Sources
- osv: GHSA-g6rx-6wfx-gj74
- nvd: CVE-2025-9340
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340
CVE-2025-9340 · published · modified · JSON