CVE-2025-48058

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service ReDoS vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause...

com.farao-community.farao:csa-runner-api (>=1.2.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=0.0.1, <=2.6.1) +345 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (>=1.0.0, <=6.7.1)

com.powsybl:powsybl-commons MAVEN version =1.0.0, =1.2.1, =0.0.1, =4.1.4, =1.0.0, =3.9.3, =1.0.0, =3.7.1, =2.0.0, =3.0.0, =2.4.1, =3.9.0, =4.5.0, =3.3.3, =3.6.0, =5.0.0 and more Source cves: CVE-2025-48058 Source advisory: MEND:CVE-2025-48058...

CVE-2025-48058 PowSyBl Core contains Polynomial REDoS’es

PowSyBl Power System Blocks is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service ReDoS vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause...

com.farao-community.farao:farao-closed-optimisation-rao (1.0.1), com.farao-community.farao:farao-commons (1.0.1) +90 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (2.5.0)

com.powsybl:powsybl-commons MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.farao-community.farao:farao-closed-optimisation-rao 1.0.1 - com.farao-community.farao:farao-commons...

com.powsybl:powsybl-action-dsl (4.6.0-rc1), com.powsybl:powsybl-action-dsl-spi (4.6.0-rc1) +54 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.6.0-rc1)

com.powsybl:powsybl-commons MAVEN version 4.6.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.6.0-rc1 - com.powsybl:powsybl-action-dsl-spi 4.6.0-rc1 -...

com.powsybl:powsybl-action-dsl (4.7.0-rc1), com.powsybl:powsybl-action-dsl-spi (4.7.0-rc1) +57 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.7.0-rc1)

com.powsybl:powsybl-commons MAVEN version 4.7.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.7.0-rc1 - com.powsybl:powsybl-action-dsl-spi 4.7.0-rc1 -...

com.powsybl:powsybl-distribution-core (>=6.0.0-rc1, <=6.7.1), com.powsybl:powsybl-starter (>=2023.3.0, <=2025.0.0) +1 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-powerfactory-dgs (>=6.0.0-rc1, <=6.7.1)

com.powsybl:powsybl-powerfactory-dgs MAVEN version =6.0.0-rc1, =6.0.0-rc1, =2023.3.0, =1.1.0, =1.11.1 Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442144...

com.farao-community.farao:farao-cne-exporter-commons (4.4.0), com.farao-community.farao:farao-commons (4.4.0) +127 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (5.3.0)

com.powsybl:powsybl-commons MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.farao-community.farao:farao-cne-exporter-commons 4.4.0 - com.farao-community.farao:farao-commons 4.4....

com.farao-community.farao:farao-commons (2.2.0-rc1), com.farao-community.farao:farao-crac-api (2.2.0-rc1) +93 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (3.7.1)

com.powsybl:powsybl-commons MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.farao-community.farao:farao-commons 2.2.0-rc1 - com.farao-community.farao:farao-crac-api 2.2.0-rc1 -...