com.farao-community.farao:csa-runner-api (>=1.2.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=0.0.1, <=2.6.1) +290 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=1.0.0, <=6.7.1)

com.powsybl:powsybl-math MAVEN version =1.0.0, =1.2.1, =0.0.1, =4.1.4, =3.9.3, =2.2.0, =3.7.1, =2.2.0-rc1, =3.0.0, =2.4.1, =3.9.0, =4.5.0, =3.3.3, =3.6.0, =1.0.0, =1.2.0 - com.farao-community.farao:farao-crac-file-gse 1.0.0 and more Source cves: CVE-2025-47771 Source advisory: MEND:CVE-2025-47771...

com.farao-community.farao:csa-runner-api (>=1.3.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1, <=2.6.1) +173 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=6.3.0, <=6.7.1)

com.powsybl:powsybl-math MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-47771 Source advisory: SNYK:JAVA-COMPOWSYBL-10442148...

com.farao-community.farao:csa-runner-api (>=1.3.1, <=2.6.1), com.farao-community.farao:csa-runner-app (>=1.3.1, <=2.6.1) +173 more potentially affected by CVE-2025-47771 via com.powsybl:powsybl-math (>=6.3.0, <=6.7.1)

com.powsybl:powsybl-math MAVEN version =6.3.0, =1.3.1, =1.3.1, =1.18.0, =1.18.0, =1.4.0, =1.6.0, =1.12.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.27.0, =1.24.0, =1.6.2, =1.13.0 and more Source cves: CVE-2025-47771 Source advisory: GHSA-F5CX-H789-J959...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the read method of the SparseMatrix class. An attacker can execute arbitrary code or escalate privileges by providing a crafted serialized object to be deserialized. Note: This is only exploitable i...