libpf4j-java vulnerabilities (Debian)

4 vulnerabilities.

• libpf4j-java Debian pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names CVE-2025-70952 Fix available 7.5 HighMarch 25, 2026
• libpf4j-java Debian pf4j vulnerable to remote code execution via expandIfZip method in the extract function CVE-2023-40828 Fix available 7.5 HighAugust 28, 2023
• libpf4j-java Debian pf4j vulnerable to remote code execution via loadpluginPath parameter CVE-2023-40827 Fix available 7.5 HighAugust 28, 2023
• libpf4j-java Debian pf4j vulnerable to remote code execution via the zippluginPath parameter CVE-2023-40826 Fix available 7.5 HighAugust 28, 2023