pom.xml - Trivy Report - 2026-09-25 14:14:13.304170774 +0000 UTC m=+10.638900922
pom
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
net.sf.jasperreports:jasperreports
CVE-2025-10492
HIGH
6.21.5
7.0.4
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/
https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition
https://github.com/Jaspersoft/jasperreports
https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647
https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569
https://github.com/Jaspersoft/jasperreports/issues/542
https://nvd.nist.gov/vuln/detail/CVE-2025-10492
net.sf.jasperreports:jasperreports
CVE-2026-6009
HIGH
6.21.5
7.0.7
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11/
https://github.com/Jaspersoft/jasperreports
https://nvd.nist.gov/vuln/detail/CVE-2026-6009
org.bouncycastle:bcprov-jdk18on
CVE-2026-8763
CRITICAL
1.84
1.85
https://access.redhat.com/security/cve/CVE-2026-8763
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558
https://github.com/bcgit/bc-java/releases/tag/r1rv85v2
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763
https://github.com/bcgit/bc-java/wiki/CVE-2026-8763
https://nvd.nist.gov/vuln/detail/CVE-2026-8763
https://www.cve.org/CVERecord?id=CVE-2026-8763
org.bouncycastle:bcprov-jdk18on
CVE-2026-13506
HIGH
1.84
1.85
https://access.redhat.com/security/cve/CVE-2026-13506
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84
https://github.com/bcgit/bc-java/wiki/CVE-2026-13506
https://nvd.nist.gov/vuln/detail/CVE-2026-13506
https://www.cve.org/CVERecord?id=CVE-2026-13506
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type
Misconf ID
Check
Severity
Message
Dockerfile Security Check
DS026
No HEALTHCHECK defined
LOW
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026