{
  "_class" : "io.jenkins.plugins.analysis.core.restapi.ReportApi",
  "issues" : [
    {
      "addedAt" : 0,
      "authorEmail" : "-",
      "authorName" : "-",
      "baseName" : "jakarta.mail-2.0.3.gw.jar",
      "category" : "",
      "columnEnd" : 0,
      "columnStart" : 0,
      "commit" : "-",
      "description" : "",
      "fileName" : "/usr/local/tomcat/webapps/govway.war/WEB-INF/lib/jakarta.mail-2.0.3.gw.jar",
      "fingerprint" : "FALLBACK-d94d49aa",
      "lineEnd" : 1,
      "lineStart" : 1,
      "message" : "CVE-2025-7962: LanguageSpecificPackageVulnerability\u000a\u000acom.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability\u000a\u000aFor additional help see: **Vulnerability CVE-2025-7962**\u000a| Severity | Package | Fixed Version | Link |\u000a| --- | --- | --- | --- |\u000a|MEDIUM|org.eclipse.angus:smtp|2.0.4|[CVE-2025-7962](https://avd.aquasec.com/nvd/cve-2025-7962)|\u000a\u000aIn Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages.\u000a\u000aPackage: org.eclipse.angus:smtp\u000aInstalled Version: 2.0.3\u000aVulnerability CVE-2025-7962\u000aSeverity: MEDIUM\u000aFixed Version: 2.0.4\u000aLink: [CVE-2025-7962](https://avd.aquasec.com/nvd/cve-2025-7962)",
      "moduleName" : "",
      "origin" : "trivy",
      "originName" : "Trivy Security Scanner",
      "packageName" : "-",
      "reference" : "1316",
      "severity" : "NORMAL",
      "toString" : "jakarta.mail-2.0.3.gw.jar(1,0): CVE-2025-7962: : CVE-2025-7962: LanguageSpecificPackageVulnerability\u000a\u000acom.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability\u000a\u000aFor additional help see: **Vulnerability CVE-2025-7962**\u000a| Severity | Package | Fixed Version | Link |\u000a| --- | --- | --- | --- |\u000a|MEDIUM|org.eclipse.angus:smtp|2.0.4|[CVE-2025-7962](https://avd.aquasec.com/nvd/cve-2025-7962)|\u000a\u000aIn Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \\r and \\n UTF-8 characters to separate different messages.\u000a\u000aPackage: org.eclipse.angus:smtp\u000aInstalled Version: 2.0.3\u000aVulnerability CVE-2025-7962\u000aSeverity: MEDIUM\u000aFixed Version: 2.0.4\u000aLink: [CVE-2025-7962](https://avd.aquasec.com/nvd/cve-2025-7962)",
      "type" : "CVE-2025-7962"
    }
  ],
  "size" : 1,
  "toString" : "1 warning (normal: 1)"
}