com.powsybl:powsybl-action-dsl (5.1.0), com.powsybl:powsybl-action-dsl-spi (5.1.0) +78 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (5.1.0)

com.powsybl:powsybl-commons MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 5.1.0 - com.powsybl:powsybl-action-dsl-spi 5.1.0 -...

com.powsybl:powsybl-action-dsl (4.9.0), com.powsybl:powsybl-action-dsl-spi (4.9.0) +95 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (4.9.0)

com.powsybl:powsybl-commons MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.9.0 - com.powsybl:powsybl-action-dsl-spi 4.9.0 -...

com.farao-community.farao:csa-runner-app (>=1.2.1, <=2.6.1), com.farao-community.farao:farao-crac-creator-cim (>=4.6.1, <=5.0.0) +41 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-cgmes-model (>=6.0.0-rc1, <=6.7.1)

com.powsybl:powsybl-cgmes-model MAVEN version =6.0.0-rc1, =1.2.1, =4.6.1, =4.6.1, =1.27.0, =1.27.0, =1.18.0, =1.18.0, =1.14.0, =1.18.0, =6.1.0-rc, =5.0.1, =6.1.0-rc, =5.0.1, =6.5.0 and more Source cves: CVE-2025-48058 Source advisory: SNYK:JAVA-COMPOWSYBL-10442139...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the com.powsybl.commons.xml.XmlReader class. An attacker can access sensitive files or internal resources by submitting specially crafted XML input. Note: This is only exploitable if untrusted users...

com.farao-community.farao:farao-virtual-hubs-network-assigner (0.0.8), com.farao-community.farao:farao-virtual-hubs-network-extension (0.0.8) +74 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (4.10.0)

com.powsybl:powsybl-commons MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.farao-community.farao:farao-virtual-hubs-network-assigner 0.0.8 -...

com.farao-community.farao:csa-runner-app (>=1.2.1, <=2.6.1), com.farao-community.farao:farao-crac-creator-cim (>=4.6.1, <=5.0.0) +41 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-cgmes-model (>=6.0.0-rc1, <=6.7.1)

com.powsybl:powsybl-cgmes-model MAVEN version =6.0.0-rc1, =1.2.1, =4.6.1, =4.6.1, =1.27.0, =1.27.0, =1.18.0, =1.18.0, =1.14.0, =1.18.0, =6.1.0-rc, =5.0.1, =6.1.0-rc, =5.0.1, =6.5.0 and more Source cves: CVE-2025-47293 Source advisory: SNYK:JAVA-COMPOWSYBL-10442133...

com.powsybl:powsybl-action-dsl (4.0.1), com.powsybl:powsybl-action-dsl-spi (4.0.1) +54 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (4.0.1)

com.powsybl:powsybl-commons MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 4.0.1 - com.powsybl:powsybl-action-dsl-spi 4.0.1 -...

com.powsybl:powsybl-action-dsl (5.3.1), com.powsybl:powsybl-action-dsl-spi (5.3.1) +73 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (5.3.1)

com.powsybl:powsybl-commons MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 5.3.1 - com.powsybl:powsybl-action-dsl-spi 5.3.1 -...