HIGH

GHSA-9wxq-mwqw-8hhg

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

Details

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven / net.sf.jasperreports:jasperreports

Introduced in: 0 Fixed in: 7.0.7

Fix # pom.xml: bump <version>7.0.7</version> for net.sf.jasperreports:jasperreports

References

https://nvd.nist.gov/vuln/detail/CVE-2026-6009 [ADVISORY]
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11 [WEB]
https://github.com/Jaspersoft/jasperreports [PACKAGE]