dependency-check / dependency-check/DependencyCheck
[FP]: CVE-2025-10492 reported on jasperreports-7.0.6.jar
Open
enhancement
FP Report
maven
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
### Package URl
pkg:maven/net.sf.jasperreports/jasperreports@7.0.6
### CPE
cpe:2.3:a:cloud:jasperreports_library:7.0.6:*:*:*:*:*:*:*
### CVE
CVE-2025-10492
### ODC Integration
{"label" => "Gradle Plugin"}
### ODC Version
12.1.9
### Description
It gets mixed with professional version, which is on major version 9, instead of 7 - issue is fixed prior in 7.0.4 , this is 7.0.6
Contributor guide
Assessment
This issue has not been assessed yet.