What’s Vulnerable › Products

ANTLR4 vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ANTLR4 version is affected

Latest ANTLR4 vulnerabilities

• CVE-2026-13503 — antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal (CVSS 5.3)
• CVE-2026-13502 — antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou (CVSS 4.5)
• CVE-2026-13501 — antlr ANTLR4 gofmt GoTarget.java GoTarget command injection (CVSS 5.3)
• CVE-2026-13500 — antlr ANTLR4 Grammar Action Block OutputFile.java code injection (CVSS 7.3)