ml.combust.mleap:mleap-runtime_2.12 (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package ml.combust.mleap:mleap-runtime_2.12, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2023-5245 — CVSS 7.5 (high): FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside…