skylot jadx affected by Incorrect Behavior Order in vulnerable dependency
Description
Published to the GitHub Advisory Database
Jul 21, 2022
Reviewed
Jul 21, 2022
Last updated
Jan 12, 2023
Impact
Vulnerable library protobuf-java 3.11.4 (CVE-2021-22569)
Patches
Dependency updated in jadx 1.4.3
References
According to the AquaSecurity report:
![05F1C52A666E4FCC844ABD085BD55124](https://user-images.githubusercontent.com/118523/177364939-087e2144-9a8a-4594-ae90-eb2acb0a2036.png)
Also, Maven repository have links to this and other vulnerabilities from dependencies:
https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/3.11.4
References