← Back

Jython Project

jython_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Jython
jython

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Jython Project
2Debian Linux
Jython
May 13, 2026
Jul 6, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
2Jython Project
Opensuse
2Jython
Opensuse
May 6, 2026
Feb 13, 2015
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.