/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-g6p6-4mcx-r4gq

Published

Last updated

https://images.chainguard.dev/security/CGA-g6p6-4mcx-r4gq
Package

zaproxy

Repository

Chainguard

Latest Update
Pending upstream fix
Aliases
  • CVE-2025-48734
  • GHSA-wxr5-93ph-8wr9

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-48734

Updates

Status

Pending upstream fix

Impact

Zaproxy includes Apache Commons BeanUtils 1.10.1, which is vulnerable to an improper access control issue (CVE-2025-48734). This dependency is included as part of the release bundle, preventing downstream users from independently upgrading to the fixed version 1.11.0

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing