Low severityGHSA Advisory· Published Aug 16, 2025· Updated Apr 15, 2026

CVE-2025-9092

Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.0 bc-fips (API modules) allows Excessive Allocation. This vulnerability is associated with program files org.Bouncycastle.Crypto.Fips.NativeLoader.

This issue affects Bouncy Castle for Java - BC-FJA 2.1.0: from BC-FJA 2.1.0 through 2.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.bouncycastle:bc-fipsMaven	>= 2.1.0, < 2.1.1	2.1.1

Affected products

Legion of the Bouncy Castle Inc./BC-JAVAGHSA
Range: = 2.1.0
osv-coords2 versions
pkg:apk/chainguard/bouncycastle-fips pkg:maven/org.bouncycastle/bc-fips
< 2.1.1-r3+ 1 more
- (no CPE)range: < 2.1.1-r3
- (no CPE)range: >= 2.1.0, < 2.1.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-v6cf-mv9h-c8mcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-9092ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000