[CVE-2025-59250] HIGH: mssql-jdbc 12.6.4 - Improper input validation

Open
#80 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
java, sql
Domain
databases, security

Research direction

Start by locating the dependency declaration that produces workers.jar and confirm that com.microsoft.sqlserver:mssql-jdbc is at version 12.6.4. Update it to a listed fixed version compatible with the project, then run the available build or vulnerability scan and confirm that CVE-2025-59250 is no longer reported.

Written by the indexing model from the issue text.

Description

security vulnerability

Vulnerability Report

Field Value
CVE CVE-2025-59250
Severity HIGH
Library com.microsoft.sqlserver:mssql-jdbc
Source workers.jar
Installed Version 12.6.4
Fixed Version 10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11
Summary

JDBC Driver for SQL Server has improper input validation issue.

References

Filed from container vulnerability scan of workers.jar

Dominant language
Java
Stars
12
Forks
10
Avg merge
2d 8h
Merged PRs (30d)
4

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from conductor-oss/java-sdk

All issues in conductor-oss/java-sdk

Similar issues

More Java issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.