There is a direct vulnerability reported on the bc-fips 2.1.2 version and this is the latest released version which is impacted.
CVE details : CVE-2026-8149
https://www.cve.org/CVERecord?id=CVE-2026-8149
https://mvnrepository.com/artifact/org.bouncycastle/bc-fips/2.1.2
There is a direct vulnerability reported on the bc-fips 2.1.2 version and this is the latest released version which is impacted.
CVE details : CVE-2026-8149
https://www.cve.org/CVERecord?id=CVE-2026-8149
https://mvnrepository.com/artifact/org.bouncycastle/bc-fips/2.1.2