Skylot

6 CVEs across 2 Skylot products. Browse Skylot vulnerabilities, severities, and proof-of-concept exploits.

Skylot products with known CVEs

ProductCVEs
Jadx5
Skylot/jadx1
Skylot CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54684High7.02026-07-14jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlled archive entry contents outside the in…
CVE-2026-42447Low3.62026-07-14jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends a…
CVE-2026-420492026-07-14jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy…
CVE-2024-32653Medium6.12024-04-22jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary co…
CVE-2022-39259Low3.32022-10-21jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of S…
CVE-2022-0219Medium5.52022-01-20Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.