ai.djl/api vulnerabilities

Latest ai.djl/api CVEs

Newest publication first

1. CVE-2025-0851 Path traversal issue in Deep Java Library

   Published 2025-01-29

   Critical·CVSS 9.3 EPSS 26.4%

   A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

2. CVE-2024-37902 Path thraversal in DeepJavaLibrary

   Published 2024-06-17

   Critical·CVSS 10.0 EPSS 0.78%

   DeepJavaLibrary(DJL) is an Engine-Agnostic Deep Learning Framework in Java. DJL versions 0.1.0 through 0.27.0 do not prevent absolute path archived artifacts from inserting archived files directly into the system, overwriting system files. This is fixed in DJL 0.28.0 and patched...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.