{"action":"Upgrade org.glassfish.jersey.core:jersey-client to 2.46 (2.46.x), 3.0.17 (3.0.x) or 3.1.10 (3.1.x) or later.","affected":[{"fixed":"2.46","introduced":"2.45"},{"fixed":"3.0.17","introduced":"3.0.16"},{"fixed":"3.1.10","introduced":"3.1.9"}],"component":"org.glassfish.jersey.core:jersey-client","cve_ids":["CVE-2025-12383"],"ecosystem":"Maven","epss":0.00298,"exploited":false,"fixed_versions":["2.46","3.0.17","3.1.10"],"ghsa_id":"GHSA-7p63-w6x9-6gr7","id":"tcs_01M5N8JRNBFWNAXFVCXAN0KP3C","modified_at":"2026-09-10T03:50:30.793006097Z","published_at":"2025-11-18T18:32:51Z","references":["https://osv.dev/vulnerability/GHSA-7p63-w6x9-6gr7","https://nvd.nist.gov/vuln/detail/CVE-2025-12383","https://github.com/eclipse-ee4j/jersey/pull/5749","https://github.com/eclipse-ee4j/jersey/pull/5794","https://github.com/eclipse-ee4j/jersey/commit/425bc883d8d623ef8d3c448fafd36729f7741bcb","https://github.com/eclipse-ee4j/jersey/commit/b2c7ba6d388cb9722f39073d7e82aa818fec49d5","https://github.com/dtbaum/jerseyCveCandidate","https://github.com/eclipse-ee4j/jersey","https://github.com/eclipse-ee4j/jersey/releases/tag/2.46","https://github.com/eclipse-ee4j/jersey/releases/tag/3.0.17","https://github.com/eclipse-ee4j/jersey/releases/tag/3.1.10","https://github.com/eclipse-ee4j/jersey/releases/tag/4.0.0-M2","https://gitlab.eclipse.org/security/cve-assignment/-/issues/74","https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/253"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-7p63-w6x9-6gr7","url":"https://osv.dev/vulnerability/GHSA-7p63-w6x9-6gr7"}],"summary":"Eclipse Jersey has a Race Condition"}