StackRadar

CVE-2025-8885

Medium

Advisory

Published 12 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
77
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
4 of 5
affected packages

Bouncy Castle for Java on All (API modules) allows Excessive Allocation

Carried by container images the latest versions of 77 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+3 more1.7840
bc-fipsmaven1.0.1, 1.0.2, 1.0.2.1, 1.0.2.3+3 more1.0.2.6, 2.0.133
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+3 more1.7813
bctls-jdk18onmaven1.711.781
bouncycastledeb1.61-1no fix listed1
OSV records
GHSA-67mf-3cr5-8w23UBUNTU-CVE-2025-8885

Charts affected

77 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
bc-fips@1.0.2
1.0.2.6

Open the chart page →

6,556
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.74
1.78
1.78

Open the chart page →

11,933
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
bcprov-jdk18on@1.71
1.78

Open the chart page →

7,857
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
bc-fips@1.0.2.5
1.0.2.6

Open the chart page →

16,210
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.11.1a7a2076b167e
bc-fips@1.0.2.5
1.0.2.6

Open the chart page →

6,168
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.78

Open the chart page →

7,930
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bc-fips@1.0.2.4
bcprov-jdk18on@1.76
1.0.2.6
1.78

Open the chart page →

27,267
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
bcprov-jdk18on@1.71
bctls-jdk18on@1.71
1.78
1.78
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bc-fips@1.0.2.3
bcprov-jdk15to18@1.75
1.0.2.6
1.78

Open the chart page →

10,530
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
bcprov-jdk18on@1.74
1.78

Open the chart page →

4,406
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
bc-fips@2.0.0
2.0.1

Open the chart page →

998
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,784
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
bc-fips@1.0.2.4
1.0.2.6

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bouncycastle@1.61-1
no fix listed

Open the chart page →

24,488
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
bc-fips@1.0.2
1.0.2.6

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
bc-fips@1.0.2
1.0.2.6

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
bc-fips@1.0.2
1.0.2.6

Open the chart page →

38,346
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
bc-fips@2.0.0
2.0.1

Open the chart page →

52,635
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
bc-fips@1.0.2
1.0.2.6

Open the chart page →

6,110
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
bcprov-jdk18on@1.77
1.78

Open the chart page →

5,291
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
bc-fips@1.0.2
1.0.2.6

Open the chart page →

17,284
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
bc-fips@1.0.2.3
1.0.2.6

Open the chart page →

13,479
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bc-fips@1.0.2.4
bcprov-jdk18on@1.76
1.0.2.6
1.78

Open the chart page →

37,373
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.78

Open the chart page →

1,692
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
bc-fips@1.0.2
1.0.2.6
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.78

Open the chart page →

31,844
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
bc-fips@1.0.2
1.0.2.6

Open the chart page →

6,045
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
bcprov-jdk18on@1.71
1.78

Open the chart page →

13,486
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.78

Open the chart page →

9,102
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.78

Open the chart page →

28,131
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
bc-fips@1.0.2.3
1.0.2.6

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
bc-fips@1.0.2.3
1.0.2.6

Open the chart page →

16,975
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
bc-fips@1.0.2.5
1.0.2.6

Open the chart page →

40,238
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
bcprov-jdk18on@1.71
1.78

Open the chart page →

9,722
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,381
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
bc-fips@1.0.2
1.0.2.6

Open the chart page →

5,806
blackduck-alertblackduck8.4.01 of 4See more

blackduck-alert blackduck 8.4.0

1 of the 4 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
bcprov-jdk18on@1.72
1.78

Open the chart page →

4,292
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
bcprov-jdk18on@1.77
1.78

Open the chart page →

8,323
opensearch-singlenodecaptnbpVerified publisher1.0.91 of 2See more

opensearch-singlenode captnbp 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.15.01963b3ece46d
bc-fips@1.0.2.5
bcprov-jdk15to18@1.74
1.0.2.6
1.78

Open the chart page →

1,073
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
bcprov-jdk15to18@1.63
1.78

Open the chart page →

6,447
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
bcprov-jdk15to18@1.63
1.78

Open the chart page →

2,237
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.78

Open the chart page →

2,512
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
bc-fips@1.0.2
1.0.2.6

Open the chart page →

10,564
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
bcprov-jdk15to18@1.63
1.78

Open the chart page →

2,021
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
bcprov-jdk15to18@1.70
1.78

Open the chart page →

1,373
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-task-manager:2.0.03a2b36df247b
bcprov-jdk18on@1.77
1.78
golenski/fibonacci-worker:2.0.0954caf4aaf6a
bcprov-jdk18on@1.77
1.78

Open the chart page →

16,927
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.1588c2ec10c7f2
bc-fips@1.0.2
1.0.2.6

Open the chart page →

34,754
ldap-backupgluuVerified publisher1.6.111 of 1See more

ldap-backup gluu 1.6.11

1 of the 1 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
gluufederation/opendj:4.3.0_011a1128b28b95
bc-fips@1.0.2.1
1.0.2.6

Open the chart page →

3,064
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
bc-fips@2.0.0
2.0.1

Open the chart page →

49,025
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8885.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
bcprov-jdk18on@1.71
1.78

Open the chart page →

16,401

Container images carrying it

75 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.78
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.78
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
bcprov-jdk18on@1.71
bctls-jdk18on@1.71
1.78
1.78
1
opensearchproject/opensearch:2.15.01963b3ece46d
bc-fips@1.0.2.5
bcprov-jdk15to18@1.74
1.0.2.6
1.78
1
opensearchproject/opensearch:2.14.0466a49f379bb
bc-fips@1.0.2.5
bcprov-jdk15to18@1.75
1.0.2.6
1.78
1
opensearchproject/opensearch:3.1.0474ea3fdf25d
bc-fips@2.0.0
2.0.1
1
opensearchproject/opensearch:2.12.0645d3d9390ad
bc-fips@1.0.2.4
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
1.0.2.6
1.78
1.78
1
opensearchproject/opensearch:2.19.269588c664014
bc-fips@2.0.0
2.0.1
1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bc-fips@1.0.2.3
bcprov-jdk15to18@1.75
1.0.2.6
1.78
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
bcprov-jdk18on@1.71
1.78
1
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
1.78
1
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.78
1
wazuh/wazuh-indexer:4.11.1a7a2076b167e
bc-fips@1.0.2.5
1.0.2.6
1
wistefan/mvf:lateste0887302b2d8
bcprov-jdk15to18@1.72
bcprov-jdk18on@1.71
1.78
1.78
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
bc-fips@1.0.2
1.0.2.6
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
bc-fips@1.0.2
1.0.2.6
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
bcprov-jdk15to18@1.65
1.78
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
bcprov-jdk15to18@1.70
1.78
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
bcprov-jdk18on@1.71
1.78
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
bcprov-jdk15to18@1.72
bcprov-jdk18on@1.71
1.78
1.78
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
bcprov-jdk18on@1.77
1.78
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.78
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.78
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.