What is GHSA-9wxq-mwqw-8hhg?

GHSA-9wxq-mwqw-8hhg is a security advisory published by GitHub Security Advisories with High severity. Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

Which CVE IDs does GHSA-9wxq-mwqw-8hhg cover?

GHSA-9wxq-mwqw-8hhg covers the following CVE IDs: CVE-2026-6009. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-9wxq-mwqw-8hhg?

GHSA-9wxq-mwqw-8hhg affects 1 product, including: maven/net.sf.jasperreports:jasperreports:\u003c 7.0.7.

GHSA-9wxq-mwqw-8hhgHigh

Jaspersoft Reports: Java Deserialization Vulnerability Lleads to Remote Code Execution (RCE)

Vendor

GitHub Security Advisories

Published

May 19, 2026

Last Modified

July 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-6009 →

📋 Description

Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected system

🎯 Affected products1

maven/net.sf.jasperreports:jasperreports:< 7.0.7

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-6009
https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-may-19-2026-jaspersoft-library-cve-2026-6009-r11
https://github.com/advisories/GHSA-9wxq-mwqw-8hhg