GitHub Advisoryadvisory · Maven

GHSA-fjh6-p566-wr6q skylot jadx affected by Incorrect Behavior Order in vulnerable dependency

MEDIUM Published 2022-07-21 Modified 2022-07-21 Official page ↗
Ecosystem
Maven
Packages
io.github.skylot:jadx-core
Severity
Moderate
Weaknesses
CWE-696
Reviewed
2022-07-21

Affected packages

• Maven io.github.skylot:jadx-core: < 1.4.3 → fixed in 1.4.3

Description

Impact Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569) Patches Dependency updated in jadx 1.4.3 References According to the AquaSecurity report: Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4

Related

Weakness · CWE (1)

  • CWE-696 Incorrect Behavior Order weakness

References