Skylot vulnerabilities
We track 2 vulnerabilities in Skylot products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Skylot vulnerabilities
- 7.0 High severity
jadx: Improper Limitation of a Pathname to a Restricted Directory
jadx is a Dex to Java decompiler. From 1.5.2 to 1.5.5, a malicious .xapk file can cause jadx to write attacker-controlled archive entry contents outside the intended XAPK plugin temporary unpack directory because XApkLoader resolves each entry name directly wi
- 8.4 High severity
jadx: Improper Control of Generation of Code
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without proper sanitization when exporting a decompiled APK as an Android Gradle project. A