Skip to content
OpenAdvisories

Package · Ubuntu

libpf4j-update-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2025-70952

    pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names

    pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation.

    org.pf4j:pf4j libpf4j-java libpf4j-java libpf4j-update-java Debian Ubuntu Maven