Advisories · Technology
skylot jadx.
Every CVE that names skylot jadx among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run
- skylot jadx
- Path traversal
- CVSS 3.6 Low
jadx: HTML Injection in Summary panel
- skylot jadx
- Cross-site scripting (XSS)
- CVSS 8.4 High
jadx: RCE Via Groovy Code Injection in Gradle Export
- skylot jadx
- Code injection
- CVSS 6.1 Medium
Insufficient input filtering of "package name" allows command execution in the device with shell privileges
- skylot jadx
- CWE-20