skylot

Products

ProductCVEsExploitedLatest
jadx5–Jul 14, 2026
skylot/jadx1–Jan 20, 2022

Exploited and recent CVEs

  • CVE-2026-54684 High 7.0 jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run 0.2%
  • CVE-2026-42447 Low 3.6 jadx: HTML Injection in Summary panel 0.2%
  • CVE-2026-42049 High 8.4 jadx: RCE Via Groovy Code Injection in Gradle Export 0.2%
  • CVE-2024-32653 Medium 6.1 Insufficient input filtering of "package name" allows command execution in the device with shell privileges 0.2%
  • CVE-2022-39259 Low 3.3 Jadx-gui subject to Denial of Service via Swing HTML rendering 0.3%
  • CVE-2022-0219 Medium 5.5 Improper Restriction of XML External Entity Reference in skylot/jadx 1.1%