Skip to content
OpenAdvisories

Product · pixee

java-security-toolkit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2024-24569

    `ZipSecurity#isBelowCurrentDirectory` is vulnerable to partial-path traversal vulnerability

    The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. `ZipSecurity#isBelowCurrentDirectory` is vulnerable to a partial-path traversal bypass. To be vulnerable to the bypass, the application must use toolkit version <=1…

    pixee java-security-toolkit