Package · Maven

net.sf.jasperreports:jasperreports

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.7

CVE-2026-6009 Public exploit

Jaspersoft Library Deserialisation Vulnerability

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

Jaspersoft JasperReports Server JasperReports IO At-Scale Jaspersoft Studio Community Edition Ubuntu Maven

May 19, 2026
High 8.7

CVE-2025-10492

Jaspersoft Library Deserialisation Vulnerability

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Jaspersoft JasperReports Server JasperReports Library Community Edition Jaspersoft Studio Professional Ubuntu Maven

Sep 16, 2025