^pkg:maven/org\.apache\.commons/commons-fileupload2-core@.*$ CVE-2025-48976 ^pkg:maven/org\.apache\.commons/commons-fileupload2-jakarta@.*$ cpe:/a:apache:commons_fileupload