Maven/net.sf.jasperreports:jasperreports CVE-2026-6009: high 8.7, EPSS 0.52%
Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)
Action: Upgrade net.sf.jasperreports:jasperreports to 7.0.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.7 | - |
Fixed versions
| 7.0.7 |
Sources
- osv: GHSA-9wxq-mwqw-8hhg
- nvd: CVE-2026-6009
- https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
- https://github.com/Jaspersoft/jasperreports
CVE-2026-6009 · published · modified · JSON