CVE-2025-47771: Deserialization of Untrusted Data

PowSyBl Power System Blocks is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there is a deserialization issue in the read method of the SparseMatrix class that can lead to a wide range of privilege escalations depending on the circumstances. This method takes in...

com.farao-community.farao:csa-runner-api (>=1.3.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1, <=2.6.1) +173 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=6.3.0, <=6.7.1)

com.powsybl:powsybl-math MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-47771 Source advisory: OSV:GHSA-F5CX-H789-J959...