Skip to content
OpenAdvisories

Package · Maven

ai.djl:api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2025-0851 Public exploit EPSS 26%

    Path traversal issue in Deep Java Library

    A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

    AWS DeepJavaLibrary opensearch-2 ai.djl:api Wolfi Maven
  • Critical 10.0
    CVE-2024-37902

    Path thraversal in DeepJavaLibrary

    DeepJavaLibrary(DJL) is an Engine-Agnostic Deep Learning Framework in Java. DJL versions 0.1.0 through 0.27.0 do not prevent absolute path archived artifacts from inserting archived files directly into the system, overwriting system files. This is fixed in DJ…

    deepjavalibrary djl opensearch-2 ai.djl:api Wolfi Maven