Unofficial rebuild of JasperReports Library 6.21.5 with the deserialization class filter from upstream 7.0.4/7.0.7 backported to fix CVE-2026-6009 (CWE-502). Java package names, public API and rendered output are unchanged from 6.21.5, so existing .jasper and .jrxml files work without modification. Not affiliated with, nor endorsed by, Jaspersoft or Cloud Software Group. See the project URL for the full source and the verification suite.