Skip to content

Product

debian/juce vulnerabilities

2 published CVES affecting debian/juce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest debian/juce CVEs

Newest publication first

  1. CVE-2021-23520 Arbitrary File Write via Archive Extraction (Zip Slip)

    Published
    CriticalCVSS 9.8 EPSS 1.1%

    The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipF...

  2. CVE-2021-23521 Link Following

    Published
    HighCVSS 7.8 EPSS 0.54%

    This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.