Package · Maven

org.python:jython-standalone

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2016-4000

Deserialization of Untrusted Data in Jython

Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.

jython jython org.python:jython-standalone org.python:jython Debian Ubuntu Maven

Jul 6, 2017
Medium —

CVE-2013-2027

Jython Improper Access Restrictions vulnerability

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

jython jython org.python:jython-standalone Debian Ubuntu Maven

Feb 13, 2015