~ / search / GHSA-m494-w24q-6f7w

GHSA-m494-w24q-6f7w

JDBC Driver for SQL Server has improper input validation issue

Source: GitHub Advisory Database (reviewed) High CVE-2025-59250

Packages

EcosystemPackageAffectedFixed in
Maven com.microsoft.sqlserver:mssql-jdbc >= 8.3.0.jre11-preview, < 10.2.4.jre11 10.2.4.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 11.2.0.jre11, < 11.2.4.jre11 11.2.4.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 12.2.0.jre11, < 12.2.1.jre11 12.2.1.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 12.6.0.jre11, < 12.6.5.jre11 12.6.5.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 12.8.0.jre11, < 12.8.2.jre11 12.8.2.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 12.10.0.jre11, < 12.10.2.jre11 12.10.2.jre11
Maven com.microsoft.sqlserver:mssql-jdbc >= 13.2.0.jre11, < 13.2.1.jre11 13.2.1.jre11

Details

As written in the advisory (Markdown source, shown as plain text).

Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network.

References

External links from the advisory. They lead to third-party sites.