Linux Distros Unpatched Vulnerability : CVE-2026-6009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution RCE, potentially allowing code execution on the affected system...

com.flowcentraltech.flowcentral:flowcentral-application (>=1.0.14, <=1.0.37), com.flowcentraltech.flowcentral:flowcentral-chart (>=1.0.14, <=1.0.37) +16 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.6.0)

net.sf.jasperreports:jasperreports MAVEN version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.flowcentraltech.flowcentral:flowcentral-application =1.0.14, =1.0.14, =1.0.14, =1.0.33,...

br.com.caelum.stella:caelum-stella-boleto (>=2.1.0, <=2.1.6), br.com.caelum.stella:stella-distribution (>=2.1.0, <=2.1.1) +4 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.5.0)

net.sf.jasperreports:jasperreports MAVEN version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.caelum.stella:caelum-stella-boleto =2.1.0, =2.1.0, =2.9.1, =6.13.0, =6.13.0, =8.0.0-...

com.github.javadev:xmltopdf (>=1.0, <=1.1), com.github.yongjacky:jee.borneo.miri (1.1.6) +5 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.1.0)

net.sf.jasperreports:jasperreports MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.github.javadev:xmltopdf =1.0, =3.0.1, =3.0.1, =3.0.1, =6.9.0, =6.9.0, =6.12.0 Source...

com.pro-crafting.tools:jasperreports-plugin (3.3.0), net.sf.jasperreports:jasperreports-chart-customizers (6.18.0) +3 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.18.0)

net.sf.jasperreports:jasperreports MAVEN version 6.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.pro-crafting.tools:jasperreports-plugin 3.3.0 -...

net.sf.jasperreports:jasperreports-chart-customizers (6.12.1), net.sf.jasperreports:jasperreports-chart-themes (6.12.1) +3 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.12.1)

net.sf.jasperreports:jasperreports MAVEN version 6.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sf.jasperreports:jasperreports-chart-customizers 6.12.1 -...

com.github.funthomas424242:mypocketmod (0.0.1), net.sf.jasperreports:jasperreports-chart-customizers (6.8.1) +4 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.8.1)

net.sf.jasperreports:jasperreports MAVEN version 6.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.github.funthomas424242:mypocketmod 0.0.1 -...

com.vincomobile.fw:vincofw-backend (>=5.0.0-release, <=5.1.0-release), io.github.carlosthe19916:jasper-utils (>=1.0.0.final, <=1.0.6.final) +2 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.4.3)

net.sf.jasperreports:jasperreports MAVEN version 6.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.vincomobile.fw:vincofw-backend =5.0.0-release, =1.0.0.final, =1.0.0.final, =1.0.6.final...

com.revolutionanalytics.deployr:jrqueryexecuter (>=7.3.0, <=7.4.0), com.tcdng.unify:unify-jasperreports (>=2.1.0, <=2.1.4) +26 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.0.0)

net.sf.jasperreports:jasperreports MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.revolutionanalytics.deployr:jrqueryexecuter =7.3.0, =2.1.0, =4.2.38, =0.0.2, =4.2.38,...

com.bbossgroups.security:bboss-security (>=4.10.8, <=5.0.0), com.bbossgroups.security:bboss-security-web (>=4.10.8, <=5.0.0) +7 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (3.7.6)

net.sf.jasperreports:jasperreports MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - com.bbossgroups.security:bboss-security =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10.8, =4.10....

org.efaps:efaps-kernel (>=1.2.3, <=1.2.5), org.efaps:efaps-webapp (>=1.2.3, <=1.2.5) +2 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (3.7.3)

net.sf.jasperreports:jasperreports MAVEN version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - org.efaps:efaps-kernel =1.2.3, =1.2.3, =1.0.9-7.0.1.v20091125, =1.0.10-7.0.1.v20091125 Sour...

net.sourceforge.dynamicreports:dynamicreports (>=1.2.0, <=1.3.0), net.sourceforge.dynamicreports:dynamicreports-core (1.4.0) potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (3.7.0)

net.sf.jasperreports:jasperreports MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sourceforge.dynamicreports:dynamicreports =1.2.0, =1.3.0 -...

br.uff.sti:jersey-mvc-jasper (0.2), com.nablarch.report:nablarch-report (1.1.0) +1 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (5.6.1)

net.sf.jasperreports:jasperreports MAVEN version 5.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.uff.sti:jersey-mvc-jasper 0.2 - com.nablarch.report:nablarch-report 1.1.0 -...

net.sourceforge.dynamicreports:dynamicreports-adhoc (>=3.0.1, <=3.0.2), net.sourceforge.dynamicreports:dynamicreports-core (>=3.0.1, <=3.0.2) +4 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (4.7.0)

net.sf.jasperreports:jasperreports MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sourceforge.dynamicreports:dynamicreports-adhoc =3.0.1, =3.0.1, =3.0.1, =2.1.0, =2.1.2 ...

net.sourceforge.dynamicreports:dynamicreports-adhoc (3.0.0), net.sourceforge.dynamicreports:dynamicreports-core (3.0.0) +2 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (4.6.0)

net.sf.jasperreports:jasperreports MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sourceforge.dynamicreports:dynamicreports-adhoc 3.0.0 -...

io.github.rongaru:jasper (1.0.0), net.sourceforge.dynamicreports:dynamicreports-core (>=2.3.1, <=2.3.2) +1 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (4.1.2)

net.sf.jasperreports:jasperreports MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - io.github.rongaru:jasper 1.0.0 - net.sourceforge.dynamicreports:dynamicreports-core =2.3.1,...

net.sourceforge.dynamicreports:dynamicreports-core (>=1.4.1, <=1.5.2) potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (3.7.2)

net.sf.jasperreports:jasperreports MAVEN version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - net.sourceforge.dynamicreports:dynamicreports-core =1.4.1, =1.5.2 Source cves: CVE-2026-600...

br.com.damsete.arq:damsete-arq-report (>=0.0.1, <=0.0.7), com.alexnederlof:jasperreports-plugin (2.4) +21 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.7.0)

net.sf.jasperreports:jasperreports MAVEN version 6.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.damsete.arq:damsete-arq-report =0.0.1, =2.0.5, =2.0.5, =4.0.4, =4.0.3, =4.0.3, =4.0....

br.com.jarch:jarch-framework (>=2.23.0, <=18.3.1), com.agifac.lib:app-framework (>=14.1.0, <=15.0.3) +13 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.3.1)

net.sf.jasperreports:jasperreports MAVEN version 6.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - br.com.jarch:jarch-framework =2.23.0, =14.1.0, =14.1.0, =14.1.0, =14.1.0, =14.1.0, =rc19,...

ch.unibas.medizin:dynamicreports-core (>=7.0.1, <=7.0.6), com.metricstream.jasper:ms-dynamic-jasper (1.0.0-alpha.0) +49 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (>=7.0.0, <=7.0.6)

net.sf.jasperreports:jasperreports MAVEN version =7.0.0, =7.0.1, =4.0.0, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =0.18.6, =0.18.90 and more Source cves: CVE-2026-6009 Source advisory: GHSA-9WXQ-MWQW-8HHG...