skylot jadx

• CVE-2026-54684 High 7.0 jadx: XAPK archive entries with absolute paths can plant drop-in plugins and achieve code execution on the next jadx run 0.2%
• CVE-2026-42447 Low 3.6 jadx: HTML Injection in Summary panel 0.2%
• CVE-2026-42049 High 8.4 jadx: RCE Via Groovy Code Injection in Gradle Export 0.2%
• CVE-2024-32653 Medium 6.1 Insufficient input filtering of "package name" allows command execution in the device with shell privileges 0.2%
• CVE-2022-39259 Low 3.3 Jadx-gui subject to Denial of Service via Swing HTML rendering 0.3%