Our trivy scans show a medium cve in pega images (CVE-2025-8885)
Is pega using Bouncy Castle (bc) libraries?
in a running image I find bc-fips-2.0.0.jar bctls-fips-2.0.19.jar bcutil-fips-2.0.3.jar inside /opt/pega/bcfips
Pega version, latest '24.2.3
Can you help providing an explanation about how pega is infected by this issue and how to resolve this?