Advisories · Technology
ANTLR4.
Every CVE that names ANTLR4 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal
- ANTLR4
- Path traversal
- CVSS 2.0 Low
antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou
- ANTLR4
- Race condition
- CVSS 4.8 Medium
antlr ANTLR4 gofmt GoTarget.java GoTarget command injection
- ANTLR4
- Other injection
- Command injection
- CVSS 6.9 Medium
antlr ANTLR4 Grammar Action Block OutputFile.java code injection
- ANTLR4
- Other injection
- Code injection