Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.python/jython-standalone@2.7.1
purl pkg:maven/org.python/jython-standalone@2.7.1
Next non-vulnerable version 2.7.2b3
Latest non-vulnerable version 2.7.2b3
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-9347-9w64-q5wp
Aliases:
CVE-2013-2027
Jython Improper Access Restrictions vulnerability Jython before 2.7.2b3 uses the current umask to set the privileges of the class cache …
2.7.2b3
Not vulnerable
CVE-2016-4000
Aliases:
GHSA-6r7r-jj8h-pq6v
Deserialization of Untrusted Data in Jython Jython before 2.7.1b3 allows attackers to execute arbitrary code via a crafted serialized PyFunction … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2013-2035
Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to …