| Package | Affected versions | Patched versions |
|---|---|---|
| io.github.skylot:jadx-core | < 1.3.2 | 1.3.2 |
| jadx | < 1.3.2 | 1.3.2 |
skylot/jadx prior to 1.3.2 is vulnerable to Improper Restriction of XML External Entities when a user is tricked into exporting a malicious APK file (via the -e option) containing a crafted AndroidManifest.xml / strings.xml to gradle, leading to possible local file disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free