com.farao-community.farao:csa-runner-api (>=1.3.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1, <=2.6.1) +97 more potentially affected by CVE-2025-48059 via com.powsybl:powsybl-iidm-criteria (>=6.3.0, <=6.7.1)

com.powsybl:powsybl-iidm-criteria MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-48059 Source advisory:...

com.farao-community.farao:gridcapa-core-cc-app (1.0.0), com.farao-community.farao:gridcapa-core-cc-post-processing-app (1.0.0) +110 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (5.2.0)

com.powsybl:powsybl-commons MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.farao-community.farao:gridcapa-core-cc-app 1.0.0 -...

com.farao-community.farao:csa-runner-app (>=1.2.1, <=2.6.1), com.farao-community.farao:farao-crac-creator-cim (>=4.6.1, <=5.0.0) +26 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-cgmes-conversion (>=6.0.0-rc1, <=6.7.1)

com.powsybl:powsybl-cgmes-conversion MAVEN version =6.0.0-rc1, =1.2.1, =4.6.1, =4.6.1, =1.14.0, =6.1.0-rc, =5.0.1, =6.1.0-rc, =5.0.1, =5.0.1, =5.3.0, =6.0.0-rc1, =6.0.0-rc1, =6.0.0-rc1, =6.0.0-rc1, =6.7.1 and more Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442138...

com.powsybl:powsybl-action-dsl (4.6.0-rc1), com.powsybl:powsybl-action-dsl-spi (4.6.0-rc1) +54 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (4.6.0-rc1)

com.powsybl:powsybl-commons MAVEN version 4.6.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.6.0-rc1 - com.powsybl:powsybl-action-dsl-spi 4.6.0-rc1 -...