{"action":"Upgrade org.apktool:apktool-lib to 3.0.2 or later.","affected":[{"fixed":"3.0.2","introduced":"3.0.0"}],"component":"org.apktool:apktool-lib","cve_ids":["CVE-2026-39973"],"ecosystem":"Maven","epss":0.00182,"exploited":false,"fixed_versions":["3.0.2"],"ghsa_id":"GHSA-m8mh-x359-vm8m","id":"tcs_01M5N94PEG4E76A25E9K9KX4KR","modified_at":"2026-04-23T21:41:29.553559Z","published_at":"2026-04-23T21:24:28Z","references":["https://osv.dev/vulnerability/GHSA-m8mh-x359-vm8m","https://github.com/iBotPeaches/Apktool/security/advisories/GHSA-m8mh-x359-vm8m","https://nvd.nist.gov/vuln/detail/CVE-2026-39973","https://github.com/iBotPeaches/Apktool/pull/4041","https://github.com/iBotPeaches/Apktool/commit/e10a0450c7afcd9462c0b76bcbff0e7428b92bdd#diff-cd531ebe1014bfd18185bf21585ca5cdb16fbcb07703ebc47949a1b4e4e36bc3","https://github.com/iBotPeaches/Apktool","https://github.com/iBotPeaches/Apktool/releases/tag/v3.0.2"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-m8mh-x359-vm8m","url":"https://osv.dev/vulnerability/GHSA-m8mh-x359-vm8m"}],"summary":"Apktool: Path Traversal to Arbitrary File Write"}