{"action":"Upgrade org.apache.jena:jena-fuseki to 5.5.0 or later.","affected":[{"fixed":"5.5.0","introduced":"0"}],"component":"org.apache.jena:jena-fuseki","cve_ids":["CVE-2025-49656"],"ecosystem":"Maven","epss":0.01558,"exploited":false,"fixed_versions":["5.5.0"],"ghsa_id":"GHSA-jq2c-m8gg-mqcm","id":"tcs_01M5N93E19RWGRZNXRD4ECJ2VT","modified_at":"2025-11-05T20:48:32.456532Z","published_at":"2025-07-21T12:30:34Z","references":["https://osv.dev/vulnerability/GHSA-jq2c-m8gg-mqcm","https://nvd.nist.gov/vuln/detail/CVE-2025-49656","https://github.com/apache/jena/commit/03c5265910aa3a27907bf54f6b4aaae3409afa4f","https://github.com/apache/jena/commit/35350569b4c1fd432d92e7c92af9597c4400debe","https://github.com/apache/jena","https://lists.apache.org/thread/qmm21som8zct813vx6dfd1phnfro6mwq","http://www.openwall.com/lists/oss-security/2025/07/21/1"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-jq2c-m8gg-mqcm","url":"https://osv.dev/vulnerability/GHSA-jq2c-m8gg-mqcm"}],"summary":"Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server"}