[CVE-2025-59250] HIGH: mssql-jdbc 12.6.4 - Improper input validation

[nthmost-orkes]

Vulnerability Report

Field	Value
CVE	CVE-2025-59250
Severity	HIGH
Library	com.microsoft.sqlserver:mssql-jdbc
Source	workers.jar
Installed Version	12.6.4
Fixed Version	10.2.4.jre11, 11.2.4.jre11, 12.2.1.jre11, 12.6.5.jre11, 12.8.2.jre11, 12.10.2.jre11, 13.2.1.jre11

Summary

JDBC Driver for SQL Server has improper input validation issue.

References

• NVD Entry

---

Filed from container vulnerability scan of workers.jar

[nthmost-orkes]

Fix PR: conductor-oss/conductor#800 (pins mssql-jdbc to 12.8.2.jre11 via Gradle dependency constraints)