CVE-2025-10492
1 advisory.
Maven/net.sf.jasperreports:jasperreports CVE-2025-10492: critical 9.8
JasperReports has a Java deserialisation vulnerability
Action: Upgrade net.sf.jasperreports:jasperreports to 7.0.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.4 | - |
Fixed versions
| 7.0.4 |
Sources
- osv: GHSA-7c3f-cg9x-f3gr
- https://nvd.nist.gov/vuln/detail/CVE-2025-10492
- https://github.com/Jaspersoft/jasperreports/issues/542
- https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647
- https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569
- https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6
- https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition
- https://github.com/Jaspersoft/jasperreports
CVE-2025-10492 · published · modified · JSON