GHSA-fjh6-p566-wr6q
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
GHSA-fjh6-p566-wr6q is a vulnerability with no CVSS score yet in io.github.skylot:jadx-core, published July 21, 2022. No source lists public exploit code. Fixed in io.github.skylot:jadx-core 1.4.3.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.4.3io.github.skylot:jadx-core +1 more
Description
Impact
Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)
Patches
Dependency updated in jadx 1.4.3
References
According to the AquaSecurity report:
Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.github.skylot:jadx-coreMaven | through 1.4.2 | 1.4.3 |
io.github.skylot:jadx-coreMaven | before 1.4.3, plus listed versions 1.3.11.3.21.3.31.3.41.3.51.4.01.4.11.4.2 | 1.4.3 |
What each source reports
GitHub AdvisoriesNo score
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
Impact
Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)
Patches
Dependency updated in jadx 1.4.3
References
According to the AquaSecurity report:
Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4
- Record
GHSA-fjh6-p566-wr6q- Weakness
- CWE-696
- Updated
- 2026-11-02
OSVNo score
skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
Impact
Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)
Patches
Dependency updated in jadx 1.4.3
References
According to the AquaSecurity report:
Also, Maven repository have links to this and other vulnerabilities from dependencies: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4
- Record
GHSA-fjh6-p566-wr6q- Weakness
- CWE-696
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.