diff --git a/jenkins.advisories.yaml b/jenkins.advisories.yaml
index 84378bc1b..18370d134 100644
--- a/jenkins.advisories.yaml
+++ b/jenkins.advisories.yaml
@@ -41,6 +41,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-38pq-3m5v-j985
     aliases:
@@ -168,6 +172,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-cm9w-hfx3-j2p6
     aliases:
@@ -258,6 +266,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-j5h3-f4x4-8725
     aliases:
@@ -296,6 +308,10 @@ advisories:
             componentType: java-archive
             componentLocation: /usr/share/java/jenkins/jenkins.war
             scanner: grype
+      - timestamp: 2024-06-03T18:24:06Z
+        type: pending-upstream-fix
+        data:
+          note: 'Bouncycastle cannot be upgraded directly in jenkins. The upstream project needs to upgrade the API plugin first: https://github.com/jenkinsci/bouncycastle-api-plugin'
 
   - id: CGA-jvx2-3xj2-cqqv
     aliases: