Jd-gui Project Jd-gui — known CVE vulnerabilities

Every CVE whose affected-product data names Jd-gui Project Jd-gui, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-26234 — CVSS 6.6 (medium): JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance.
• CVE-2023-26235 — CVSS 6.1 (medium): JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java.