Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS
- CVE-2025-12194 Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LT 0.2%
- CVE-2025-9341 Garbage collection can delay for AES CBC Native support, resulting in heap exhaustion 0.2%