CVE-2025-12383
1 advisory.
Maven/org.glassfish.jersey.core:jersey-client CVE-2025-12383: critical
Eclipse Jersey has a Race Condition
Action: Upgrade org.glassfish.jersey.core:jersey-client to 2.46 (2.46.x), 3.0.17 (3.0.x) or 3.1.10 (3.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.45 | 2.46 | - |
| 3.0.16 | 3.0.17 | - |
| 3.1.9 | 3.1.10 | - |
Fixed versions
| 2.46 | 3.0.17 | 3.1.10 |
Sources
- osv: GHSA-7p63-w6x9-6gr7
- https://nvd.nist.gov/vuln/detail/CVE-2025-12383
- https://github.com/eclipse-ee4j/jersey/pull/5749
- https://github.com/eclipse-ee4j/jersey/pull/5794
- https://github.com/eclipse-ee4j/jersey/commit/425bc883d8d623ef8d3c448fafd36729f7741bcb
- https://github.com/eclipse-ee4j/jersey/commit/b2c7ba6d388cb9722f39073d7e82aa818fec49d5
- https://github.com/dtbaum/jerseyCveCandidate
- https://github.com/eclipse-ee4j/jersey
- https://github.com/eclipse-ee4j/jersey/releases/tag/2.46
- https://github.com/eclipse-ee4j/jersey/releases/tag/3.0.17
- https://github.com/eclipse-ee4j/jersey/releases/tag/3.1.10
- https://github.com/eclipse-ee4j/jersey/releases/tag/4.0.0-M2
- https://gitlab.eclipse.org/security/cve-assignment/-/issues/74
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/253
CVE-2025-12383 · published · modified · JSON