Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1mamg2LXA1NjYtd3I2cc4AAtkO

skylot jadx affected by Incorrect Behavior Order in vulnerable dependency

Impact

Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)

Patches

Dependency updated in jadx 1.4.3

References

According to the AquaSecurity report:

Also, Maven repository have links to this and other vulnerabilities from dependencies:
https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4

Permalink: https://github.com/advisories/GHSA-fjh6-p566-wr6q
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mamg2LXA1NjYtd3I2cc4AAtkO
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago

Identifiers: GHSA-fjh6-p566-wr6q
References:

• https://github.com/skylot/jadx/security/advisories/GHSA-fjh6-p566-wr6q
• https://github.com/skylot/jadx/releases/tag/v1.4.3
• https://github.com/advisories/GHSA-fjh6-p566-wr6q

Repository: https://github.com/skylot/jadx
Blast Radius: 0.0

Affected Packages