CVE-2025-48058

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/powsybl/powsybl-core/commit/72f79dec6d4292f892fbddd68a19c67935c7d81f", "name": "https://github.com/powsybl/powsybl-core/commit/72f79dec6d4292f892fbddd68a19c67935c7d81f", "tags": [], "refsource": ""}, {"url": "https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "name": "https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2", "tags": [], "refsource": ""}, {"url": "https://github.com/powsybl/powsybl-core/security/advisories/GHSA-rqpx-f6rc-7hm5", "name": "https://github.com/powsybl/powsybl-core/security/advisories/GHSA-rqpx-f6rc-7hm5", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause significant CPU consumption due to regex backtracking \u2014 even with polynomial patterns. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-1333"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2025-48058", "ASSIGNER": "security-advisories@github.com"}}, "impact": {}, "publishedDate": "2025-06-20T01:15Z", "configurations": {"nodes": [], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-06-20T01:15Z"}