Vulnerability in Powsybl Powsybl-Core
CVE-2025-48058
PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the PowSyBl's DataSource mechanism. If successfully exploited, a malicious actor can cause significant CPU consumption due to regex backtracking — even with polynomial patterns. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2.
Vulnerability class: ReDoS (Regular Expression Denial of Service)
EPSS: 0.004 (27.6th percentile) — read the EPSS interpretation.
Affected products
- Powsybl Powsybl-core — versions < 6.7.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)