CVE-2022-39259

jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds.

• CWE-20

• https://github.com/skylot/jadx/security/advisories/GHSA-3r7j-8mqh-6qhxExploit, Third Party Advisory
• https://github.com/skylot/jadx/security/advisories/GHSA-3r7j-8mqh-6qhxExploit, Third Party Advisory

Published

Oct 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39253Git is an open source, scalable, distributed revision contro…5.5
• CVE-2022-39254matrix-nio is a Python Matrix client library, designed accor…6.5
• CVE-2022-39255Matrix iOS SDK allows developers to build iOS apps compatibl…7.5
• CVE-2022-39256Orckestra C1 CMS is a .NET based Web Content Management Syst…8
• CVE-2022-39257Matrix iOS SDK allows developers to build iOS apps compatibl…7.5
• CVE-2022-39258mailcow is a mailserver suite. A vulnerability innversions p…8.2
• CVE-2022-3926The WP OAuth Server (OAuth Authentication) WordPress plugin …6.5
• CVE-2022-39260Git is an open source, scalable, distributed revision contro…8.8
• CVE-2022-39261Twig is a template language for PHP. Versions 1.x prior to 1…7.5
• CVE-2022-39262GLPI stands for Gestionnaire Libre de Parc Informatique. GLP…4.8
• CVE-2022-39263`@next-auth/upstash-redis-adapter` is the Upstash Redis adap…8.1
• CVE-2022-39264nheko is a desktop client for the Matrix communication appli…5.9