HOMEVULNERABILITIESVENDORSPf4j Project

Pf4j Project CVEs & Vulnerabilities

1 CVEs affecting Pf4j Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

pf4j 1
CVE-2025-70952HIGH

pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation.

25 Mar 2026
7.5
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database