← Back

Java Merge Sort

java-merge-sort

Vendor: Java Merge Sort Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24913
1Java Merge Sort Project
1Java Merge Sort
Jun 17, 2026
Jan 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTe...Show more
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.Show less