[io.github.skylot:jadx-core] skylot jadx affected by Incorrect Behavior Order in vulnerable dependency

Impact

Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)

Patches

Dependency updated in jadx 1.4.3

References

According to the AquaSecurity report:

Also, Maven repository have links to this and other vulnerabilities from dependencies:
https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4

References

• https://github.com/skylot/jadx/security/advisories/GHSA-fjh6-p566-wr6q
• https://github.com/skylot/jadx/releases/tag/v1.4.3
• https://github.com/advisories/GHSA-fjh6-p566-wr6q