<reportApi _class='io.jenkins.plugins.analysis.core.restapi.ReportApi'><issue><addedAt>0</addedAt><authorEmail>-</authorEmail><authorName>-</authorName><baseName>jasperreports-6.20.0.jar</baseName><category></category><columnEnd>0</columnEnd><columnStart>0</columnStart><commit>-</commit><description></description><fileName>/usr/local/tomcat/webapps/govwayAPIMonitor.war/WEB-INF/lib/jasperreports-6.20.0.jar</fileName><fingerprint>FALLBACK-b0f36103</fingerprint><lineEnd>1</lineEnd><lineStart>1</lineStart><message>CVE-2025-10492: LanguageSpecificPackageVulnerability

JasperReports has a Java deserialisation vulnerability

For additional help see: **Vulnerability CVE-2025-10492**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|net.sf.jasperreports:jasperreports||[CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)|

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Package: net.sf.jasperreports:jasperreports
Installed Version: 6.20.0
Vulnerability CVE-2025-10492
Severity: HIGH
Fixed Version: 
Link: [CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)</message><moduleName></moduleName><origin>trivy</origin><originName>Trivy Security Scanner</originName><packageName>-</packageName><reference>1374</reference><severity>HIGH</severity><toString>jasperreports-6.20.0.jar(1,0): CVE-2025-10492: : CVE-2025-10492: LanguageSpecificPackageVulnerability

JasperReports has a Java deserialisation vulnerability

For additional help see: **Vulnerability CVE-2025-10492**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|net.sf.jasperreports:jasperreports||[CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)|

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Package: net.sf.jasperreports:jasperreports
Installed Version: 6.20.0
Vulnerability CVE-2025-10492
Severity: HIGH
Fixed Version: 
Link: [CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)</toString><type>CVE-2025-10492</type></issue><issue><addedAt>0</addedAt><authorEmail>-</authorEmail><authorName>-</authorName><baseName>jasperreports-6.20.0.jar</baseName><category></category><columnEnd>0</columnEnd><columnStart>0</columnStart><commit>-</commit><description></description><fileName>/usr/local/tomcat/webapps/govwayMonitor.war/WEB-INF/lib/jasperreports-6.20.0.jar</fileName><fingerprint>FALLBACK-b0f36103</fingerprint><lineEnd>1</lineEnd><lineStart>1</lineStart><message>CVE-2025-10492: LanguageSpecificPackageVulnerability

JasperReports has a Java deserialisation vulnerability

For additional help see: **Vulnerability CVE-2025-10492**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|net.sf.jasperreports:jasperreports||[CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)|

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Package: net.sf.jasperreports:jasperreports
Installed Version: 6.20.0
Vulnerability CVE-2025-10492
Severity: HIGH
Fixed Version: 
Link: [CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)</message><moduleName></moduleName><origin>trivy</origin><originName>Trivy Security Scanner</originName><packageName>-</packageName><reference>1374</reference><severity>HIGH</severity><toString>jasperreports-6.20.0.jar(1,0): CVE-2025-10492: : CVE-2025-10492: LanguageSpecificPackageVulnerability

JasperReports has a Java deserialisation vulnerability

For additional help see: **Vulnerability CVE-2025-10492**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|net.sf.jasperreports:jasperreports||[CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)|

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Package: net.sf.jasperreports:jasperreports
Installed Version: 6.20.0
Vulnerability CVE-2025-10492
Severity: HIGH
Fixed Version: 
Link: [CVE-2025-10492](https://avd.aquasec.com/nvd/cve-2025-10492)</toString><type>CVE-2025-10492</type></issue><size>2</size><toString>2 warnings (high: 2)</toString></reportApi>