description: An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.
problem types: Inclusion of Functionality from Untrusted Control Sphere (CWE-829)
affected:
{
product: jsreport
vendor: n/a
versions:
status: affected, version: Fixed version: 2.6.1
}