org.apache.struts:struts2-jasperreports-plugin (>=2.5-beta3, <=2.5.33), org.seedstack.addons.io:io-jasper (>=2.1.0, <=3.0.0) +2 more potentially affected by CVE-2026-6009 via net.sf.jasperreports:jasperreports (6.0.3)

net.sf.jasperreports:jasperreports MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.jasperreports:jasperreports and may be impacted: - org.apache.struts:struts2-jasperreports-plugin =2.5-beta3, =2.1.0, =2.0.0-m2, =2.0.0-m2,...