Every CVE whose affected-product data names Jython Project Jython, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2016-4000 — CVSS 9.8 (critical): Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
CVE-2013-2027 — CVSS 4.6 (medium): Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access…