PatchTheCVEjena vulnerabilities and fixes
Recent CVEs affecting jena, with upgrade or downgrade steps. 2 tracked.
jena has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-07-21. Highest priority: CVE-2025-49656 (score 55/100).
- CVE-2025-50151 HIGH 8.8 UPGRADE File access paths in configuration files uploaded by users with administrator access are not validated. This
- CVE-2025-49656 HIGH 7.5 UPGRADE Users with administrator access can create databases files outside the files area of the Fuseki server. This
FAQ
How do I fix jena vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jena being exploited right now?
None of the tracked jena CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jena CVE should I patch first?
CVE-2025-49656 currently ranks highest (55/100): Users with administrator access can create databases files outside the files area of the Fuseki server. This .