Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Java Merge Sort Project

First CVE: Jan 12, 2023Active for: 4 yearsTotal CVEs: 2

The Java Merge Sort Project maintains a narrowly scoped sorting utility with a limited vulnerability surface. Current vulnerability details and exposure counts are shown alongside this summary.

FAUCET AI Generated
1
Total CVEs
Bottom 1%
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
5.5
Avg CVSS Score
Higher Avg CVSS Score than 22% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Java Merge Sort Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 12, 2023
3 years ago
Most Recent CVE
Jan 12, 2023
1,289 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (1 CVEs).

1 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-24913MEDIUM
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java,
Jan 12, 20235.520NONO
View all 1 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products1 CVEs
100%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
Medium
Attack Vector
Local1 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (1 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Java Merge Sort Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Java Merge Sort Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Java Merge Sort Project's Products

View all 1 CNAs →

Top CWEs