Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.python/jython@2.7-b2
purl pkg:maven/org.python/jython@2.7-b2
Next non-vulnerable version 2.7.2b2
Latest non-vulnerable version 2.7.2
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-6r7r-jj8h-pq6v
Aliases:
CVE-2016-4000
Deserialization of Untrusted Data in Jython Jython before 2.7.1b3 allows attackers to execute arbitrary code via a crafted serialized PyFunction …
2.7.1b3
Vulnerable
CVE-2016-4000
Aliases:
GHSA-6r7r-jj8h-pq6v
Deserialization of Untrusted Data in Jython Jython before 2.7.1b3 allows attackers to execute arbitrary code via a crafted serialized PyFunction … There are no reported fixed by versions.
This package is not known to fix any advisories.