What’s Vulnerable › Products

skylot jadx vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your skylot jadx version is affected

Latest skylot jadx vulnerabilities

• CVE-2026-54684 — jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run (CVSS 7.0)
• CVE-2026-42447 — jadx: HTML Injection in Summary panel (CVSS 5.0)
• CVE-2026-42049 — jadx: RCE Via Groovy Code Injection in Gradle Export (CVSS 8.4)
• CVE-2022-39259 — Jadx-gui subject to Denial of Service via Swing HTML rendering (CVSS 5.5)
• CVE-2022-0219 — Improper Restriction of XML External Entity Reference in skylot/jadx (CVSS 5.5)