org.antlr:antlr4@4.13.0

4.13.2

13 years ago

2 years ago

Direct Vulnerabilities

Known vulnerabilities in the org.antlr:antlr4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Arbitrary Code Injection Affected versions of this package are vulnerable to Arbitrary Code Injection via the `Grammar Action Block Handler` process in `OutputFile.java`. An attacker can execute arbitrary code by providing crafted input to the affected component. How to fix Arbitrary Code Injection? There is no fixed version for `org.antlr:antlr4`.	[0,)
M Arbitrary Command Injection Affected versions of this package are vulnerable to Arbitrary Command Injection via the `GoTarget` function in the `gofmt` component. An attacker can execute arbitrary system commands by manipulating input passed to this function from a local environment. How to fix Arbitrary Command Injection? There is no fixed version for `org.antlr:antlr4`.	[0,)
M Directory Traversal Affected versions of this package are vulnerable to Directory Traversal via the `getImportedVocabFile` function in the tokenVocab Grammar Option Handler. An attacker can access arbitrary files on the system by supplying crafted input paths. How to fix Directory Traversal? There is no fixed version for `org.antlr:antlr4`.	[0,)