CVE-2020-7647: Jooby

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.

Affected products

• Jooby Jooby: before 1.6.7 (fixed in 1.6.7); from 2.0.0, before 2.8.2 (fixed in 2.8.2)

Published 2020-05-11. Last modified 2026-06-17.