skylot jadx affected by Incorrect Behavior Order in vulnerable dependency

MEDIOGHSA-fjh6-p566-wr6q · Published 21/07/2022 · updated 28/11/2024

In breve

GHSA-fjh6-p566-wr6q è una vulnerabilità MEDIO che riguarda io.github.skylot:jadx-core.
Correzione: aggiornare a 1.4.3 o successiva.

Package	Affected versions	Patched versions
io.github.skylot:jadx-core Maven	`< 1.4.3`	`1.4.3`

Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)

Dependency updated in jadx 1.4.3

According to the AquaSecurity report:

Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4

Running one of these products? Scan your site to see whether it exposes a vulnerable version.