CVE-2025-58059
1 advisory.
Maven/com.ritense.valtimo:core CVE-2025-58059: critical 9.1
Valtimo scripting engine can be used to gain access to sensitive data or resources
Action: Upgrade com.ritense.valtimo:core to 12.16.0.RELEASE (12.x) or 13.1.2.RELEASE (13.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.16.0.RELEASE | - |
| 13.0.0.RELEASE | 13.1.2.RELEASE | - |
Fixed versions
| 12.16.0.RELEASE | 13.1.2.RELEASE |
Sources
- osv: GHSA-w48j-pp7j-fj55
- https://github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-w48j-pp7j-fj55
- https://nvd.nist.gov/vuln/detail/CVE-2025-58059
- https://github.com/valtimo-platform/valtimo-backend-libraries/commit/45eb60b0b2df5964fb9917295d0dceb1fff8dd85
- https://github.com/valtimo-platform/valtimo-backend-libraries
CVE-2025-58059 · published · modified · JSON