CVE-2025-53622

DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.4, 8.2, and 9.1, a path traversal vulnerability is possible during the import of an archive in Simple Archive Format, either from command-line ./dspace import command ...

org.dspace:dspace-jspui-api (1.5.0-beta1), org.dspace:dspace-jspui-webapp (1.5.0-beta1) +10 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.0-beta1)

org.dspace:dspace-api MAVEN version 1.5.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.0-beta1 - org.dspace:dspace-jspui-webapp 1.5.0-beta1 -...

org.dataone.dspace:auto-versioning-api (>=5.4.0, <=5.4.2), org.dataone.dspace:auto-versioning-xmlui (>=5.4.0, <=5.4.2) +20 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.4)

org.dspace:dspace-api MAVEN version 5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dataone.dspace:auto-versioning-api =5.4.0, =5.4.0, =5.4.0, =5.4.2 - org.dspace.modules:additions 5.4 -...

org.dspace.modules:additions (3.0-rc3), org.dspace.modules:jspui (3.0-rc3) +12 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (3.0-rc3)

org.dspace:dspace-api MAVEN version 3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 3.0-rc3 - org.dspace.modules:jspui 3.0-rc3 - org.dspace.modules:lni 3.0-rc3 -...

org.dspace.modules:additions (4.0-rc1), org.dspace.modules:jspui (4.0-rc1) +14 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (4.0-rc1)

org.dspace:dspace-api MAVEN version 4.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 4.0-rc1 - org.dspace.modules:jspui 4.0-rc1 - org.dspace.modules:lni 4.0-rc1 -...

org.dspace.modules:additions (4.0), org.dspace.modules:jspui (4.0) +14 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (4.0)

org.dspace:dspace-api MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 4.0 - org.dspace.modules:jspui 4.0 - org.dspace.modules:lni 4.0 - org.dspace.modules:rest...

org.dspace.modules:additions (4.1), org.dspace.modules:jspui (4.1) +14 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (4.1)

org.dspace:dspace-api MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 4.1 - org.dspace.modules:jspui 4.1 - org.dspace.modules:lni 4.1 - org.dspace.modules:rest...

org.dspace.modules:additions (5.0), org.dspace.modules:jspui (5.0) +17 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.0)

org.dspace:dspace-api MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.0 - org.dspace.modules:jspui 5.0 - org.dspace.modules:lni 5.0 - org.dspace.modules:oai 5...

org.dspace.modules:additions (5.1), org.dspace.modules:jspui (5.1) +17 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.1)

org.dspace:dspace-api MAVEN version 5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.1 - org.dspace.modules:jspui 5.1 - org.dspace.modules:lni 5.1 - org.dspace.modules:oai 5...

org.dspace.modules:additions (5.7), org.dspace.modules:jspui (5.7) +17 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.7)

org.dspace:dspace-api MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.7 - org.dspace.modules:jspui 5.7 - org.dspace.modules:lni 5.7 - org.dspace.modules:oai 5...

org.dspace.modules:additions (5.11), org.dspace.modules:jspui (5.11) +18 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (5.11)

org.dspace:dspace-api MAVEN version 5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 5.11 - org.dspace.modules:jspui 5.11 - org.dspace.modules:lni 5.11 - org.dspace.modules:o...

org.dspace.modules:additions (6.0-rc2), org.dspace.modules:jspui (6.0-rc2) +14 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (6.0-rc2)

org.dspace:dspace-api MAVEN version 6.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.0-rc2 - org.dspace.modules:jspui 6.0-rc2 - org.dspace.modules:oai 6.0-rc2 -...

org.dspace.modules:additions (6.1), org.dspace.modules:jspui (6.1) +14 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (6.1)

org.dspace:dspace-api MAVEN version 6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.1 - org.dspace.modules:jspui 6.1 - org.dspace.modules:oai 6.1 - org.dspace.modules:rdf 6...

org.dspace.modules:additions (7.0-preview-1), org.dspace.modules:oai (7.0-preview-1) +12 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (7.0-preview-1)

org.dspace:dspace-api MAVEN version 7.0-preview-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 7.0-preview-1 - org.dspace.modules:oai 7.0-preview-1 - org.dspace.modules:rdf...

org.dspace.modules:jspui (1.7.3), org.dspace.modules:lni (1.7.3) +19 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.7.3)

org.dspace:dspace-api MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:jspui 1.7.3 - org.dspace.modules:lni 1.7.3 - org.dspace.modules:oai 1.7.3 - org.dspace.modules:swo...

org.dspace:dspace-jspui-api (1.5.2-rc2), org.dspace:dspace-jspui-webapp (1.5.2-rc2) +8 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.2-rc2)

org.dspace:dspace-api MAVEN version 1.5.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.2-rc2 - org.dspace:dspace-jspui-webapp 1.5.2-rc2 - org.dspace:dspace-lni-core...

org.dspace:dspace-discovery-provider (1.7.0-rc1), org.dspace:dspace-discovery-xmlui-api (1.7.0-rc1) +13 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.7.0-rc1)

org.dspace:dspace-api MAVEN version 1.7.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-discovery-provider 1.7.0-rc1 - org.dspace:dspace-discovery-xmlui-api 1.7.0-rc1 -...

org.dspace.modules:additions (3.5), org.dspace.modules:jspui (3.5) +13 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (3.5)

org.dspace:dspace-api MAVEN version 3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 3.5 - org.dspace.modules:jspui 3.5 - org.dspace.modules:lni 3.5 - org.dspace.modules:oai 3...

org.dspace.modules:additions (6.4), org.dspace.modules:jspui (6.4) +15 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (6.4)

org.dspace:dspace-api MAVEN version 6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace.modules:additions 6.4 - org.dspace.modules:jspui 6.4 - org.dspace.modules:oai 6.4 - org.dspace.modules:rdf 6...

org.dspace:dspace-jspui-api (1.5.1-beta), org.dspace:dspace-jspui-webapp (1.5.1-beta) +8 more potentially affected by CVE-2025-53622 via org.dspace:dspace-api (1.5.1-beta)

org.dspace:dspace-api MAVEN version 1.5.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.dspace:dspace-api and may be impacted: - org.dspace:dspace-jspui-api 1.5.1-beta - org.dspace:dspace-jspui-webapp 1.5.1-beta - org.dspace:dspace-lni-core...