CVE-2022-25914
1 advisory.
Maven/com.google.cloud.tools:jib-core CVE-2022-25914: critical 9.8
com.google.cloud.tools:jib-core vulnerable to Remote Code Execution (RCE)
Action: Upgrade com.google.cloud.tools:jib-core to 0.22.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.0 | - |
Fixed versions
| 0.22.0 |
Sources
- osv: GHSA-936v-cg49-m2g5
- https://nvd.nist.gov/vuln/detail/CVE-2022-25914
- https://github.com/GoogleContainerTools/jib/pull/3744
- https://github.com/GoogleContainerTools/jib/commit/67fa40bc2c484da0546333914ea07a89fe44eaaf
- https://github.com/GoogleContainerTools/jib
- https://security.snyk.io/vuln/SNYK-JAVA-COMGOOGLECLOUDTOOLS-2968871
CVE-2022-25914 · published · modified · JSON