org.bouncycastle:bc-fips vulnerabilities

CVEs whose affected-version data names the org.bouncycastle:bc-fips package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-8798High

Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound

▾ Twilightbouncycastle · org.bouncycastle:bc-fipsEPSS 0.43%via GHSA

org.bouncycastle:bc-fips vulnerabilities (CVEs) · VulnSea