skylot/jadx · Security
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
- GHSA ID
- GHSA-fjh6-p566-wr6q
- Severity
- medium
- Published
- Updated
Description
Impact
Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)
Patches
Dependency updated in jadx 1.4.3
References
According to the AquaSecurity report:
Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4
CWEs
- CWE-696 · Incorrect Behavior Order