CVE-2025-56769
1 advisory.
Maven/cn.hutool:hutool-extra CVE-2025-56769: high
Hutool allows remote code execution (RCE) via the QLExpressEngine class
Action: Upgrade cn.hutool:hutool-extra to 5.8.40 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.8.40 | - |
Fixed versions
| 5.8.40 |
Sources
- osv: GHSA-gcfh-36x4-mgj6
- https://nvd.nist.gov/vuln/detail/CVE-2025-56769
- https://github.com/chinabugotech/hutool/issues/3994
- https://github.com/chinabugotech/hutool/commit/3d0d8dea4bc2fac2e9b45dc67244195f30e42e4b
- https://github.com/chinabugotech/hutool
CVE-2025-56769 · published · modified · JSON