Skip to content
OpenAdvisories

Package · Maven

io.github.skylot:jadx-core

3 known vulnerabilities.

3 results · Feed

  • Low 3.3

    JADX file override vulnerability

    ### Summary when jadx parses a resource file, there is an escape problem with the style file, which can overwrite other files in the directory when saving the decompile result. Although I don't think this vulnerability realizes path traversal in the true sens…

  • Medium —

    skylot jadx affected by Incorrect Behavior Order in vulnerable dependency

    ### Impact Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569) ### Patches Dependency updated in jadx 1.4.3 ### References According to the AquaSecurity report: ![05F1C52A666E4FCC844ABD085BD55124](https://user-images.githubusercontent.com/118523/17736493…

  • Medium 5.5
    CVE-2022-0219 Public exploit

    Improper Restriction of XML External Entity Reference in skylot/jadx

    Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.