Skip to content

← Public intelligence

Maven package

net.sf.robocode:robocode.core

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Critical, CVSS 10.0MavenPublished

    Robocode vulnerable to Directory Traversal in recursivelyDelete Method

    CVE-2025-14306 · GHSA-j8r2-47rx-qhw4

    Affected
    • Maven net.sf.robocode:robocode.core < 1.9.5.6
    Fixed in
    1.9.5.6· Vendor fix available
    Issue
    A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions.

    Recommended action: Upgrade to 1.9.5.6 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →
  2. UnratedMavenPublished

    Robocode Arbitrary Code Execution

    CVE-2007-6382 · GHSA-xh22-fw58-56pp

    Affected
    • Maven net.sf.robocode:robocode.core < 1.5.1
    Fixed in
    1.5.1· Vendor fix available
    Issue
    The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

    Recommended action: Upgrade to 1.5.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →