GCVE - cpe:2.3:a:jadx_project:jadx:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jadx_project:jadx:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Jadx Project (`29d45c9d-cfee-564f-b507-cfaa22112e45`)
Product	Jadx (`39d61d0c-be24-52db-8b50-8c5a6a031623`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/skylot/jadx`	purl2cpe	2026-06-01 10:15:39.509424
`pkg:maven/io.github.skylot/jadx-core`	purl2cpe	2026-06-01 10:15:39.509428
`pkg:sourceforge/jadx.mirror`	purl2cpe	2026-06-01 10:15:39.509431

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-39259`	vulnerable	2026-06-08 05:47:18.454165	Jadx-gui subject to Denial of Service via Swing HTML rendering LOW (3.3) jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds. Published: 2022-10-21T00:00:00.000Z Updated: 2025-04-22T17:18:05.407Z Open on db.gcve.eu Reference links https://github.com/skylot/jadx/security/advisories/GHSA-3r7j-8mqh-6qhx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-0219`	vulnerable	2026-06-08 05:39:09.523469	Improper Restriction of XML External Entity Reference in skylot/jadx MEDIUM (5.5) Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2. Published: 2022-01-20T16:30:11.000Z Updated: 2024-08-02T23:18:42.982Z Open on db.gcve.eu Reference links https://huntr.dev/bounties/0d093863-29e8-4dd7-a885-64f76d50bf5e https://github.com/skylot/jadx/commit/d22db30166e7cb369d72be41382bb63ac8b81c52	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.