maven package report

Is io.github.javaezlib:JavaEZ safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

0.70%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-67fj-6w6m-w5j8, the advisory selected below

// advisories

GHSA-67fj-6w6m-w5j8

HIGHCVE-2022-29249

This weakness allows the force decryption of locked text by hackers. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. Upgrading to 1.7 is advised.

Affected: = 1.6
Fixed in: 1.7
Weakness: CWE-326
Published: 2022-05-25
Source: github

GHSA NVD MITRE reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 00:38 UTC. The most recent advisory here was published 2022-05-25. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is io.github.javaezlib:JavaEZ safe? maven package security report | CyberXYZ