Search for packages
purl | pkg:maven/org.python/jython-standalone@2.7-rc1 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-7fcf-99zp-aaab
Aliases: CVE-2013-2027 GHSA-9347-9w64-q5wp |
Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors. |
Affected by 0 other vulnerabilities. |
VCID-s37h-9fw6-aaab
Aliases: CVE-2016-4000 GHSA-6r7r-jj8h-pq6v |
Deserialization Gadget This package allows attackers to execute arbitrary code via a crafted serialized PyFunction object. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |