CVE-2023-26234

CVE-2023-26234 affects JD-GUI 1.6.6 and is caused by deserialization via UIMainWindowPreferencesProvider.singleInstance. Several connected records (NVD, Red Hat, OSV, CNNVD, etc.) corroborate the issue, with CVSS 3.1/3.1 base score 9.8 (CRITICAL) and potential full impact on confidentiality, inte...

CVE-2023-26235

JD-GUI 1.6.6 is affected by an XSS vulnerability that originates in util/net/InterProcessCommunicationUtil.java, as described across multiple sources (e.g., CVE-2023-26235). The vulnerability details consistently show an XSS flaw enabling injection via the specified InterProcessCommunicationUtil....