skylot
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| jadx | 5 | – | Jul 14, 2026 |
| skylot/jadx | 1 | – | Jan 20, 2022 |
Exploited and recent CVEs
- CVE-2026-54684 jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run 0.2%
- CVE-2026-42447 jadx: HTML Injection in Summary panel 0.2%
- CVE-2026-42049 jadx: RCE Via Groovy Code Injection in Gradle Export 0.2%
- CVE-2024-32653 Insufficient input filtering of "package name" allows command execution in the device with shell privileges 0.2%
- CVE-2022-39259 Jadx-gui subject to Denial of Service via Swing HTML rendering 0.3%
- CVE-2022-0219 Improper Restriction of XML External Entity Reference in skylot/jadx 1.1%